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ABSTRACT 


This report presents the results of en analysis to determine STS/Centaur 
catastrophic vehicle response probabilities for the phases of vehicle 
flight from STS Liftoff to Centaur separation from the Orblter. The 
analysis considers only category one component failure modes as contrl- 
butors to the vehicle response mode probabilities. The relevant com- 
ponent failure modes are grouped Into one of fourteen categories of 
potential vehicle behavior. By assigning failure rates to each com- 
ponent, for each of Its failure modes, the STS/Centaur vehicle response 
probabilities In each phase of flight can be calculated. The results of 
this study will be used In a DOC analysis to ascertain the hazard from 
carrying a nuclear payload on the STS. 
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GLOSSARY 


APU 

Auxiliary Power Unit 

C1SS 

Centaur Integrated Support System 

ET 

External Tank 

ETS 

External Tank Separation 

GSE 

Ground Support Equipment 

IUS 

Inertial Upper Stage 

HE 

Haln Engine 

MECO 

Haln Engine Cutoff 

HMH 

Honomethyl Hydrazine 

MPS 

Haln Propulsion System 

OHS 

Orbital Maneuvering System 

ORB 

Orb Iter 

PBK 

Payload-Bay Kit 

RCS 

Reaction Control System 

RSCO 

Range Safety Command Destruct 

STAGING 

SRB Separation 

SRB 

Solid Rocket Booster 

SSME 

Space Shuttle Main Engines 

STS 

Space Transport System 

TPS 

Thermal Protection System 

TVC 

Thrust Vector Control 
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1 . 


INTRODUCTION 


The purpose of this study Is to determine the catastrophic failure 
probabilities, for the Galileo mission, for each Identified STS/Centaur 
response mode from liftoff through Centaur deployment. 

Only failures leading to loss of vehicle and hence the payload are 
considered. The results of this study will be used as Input to an 
analysis of the risk associated with carrying a nuclear payload on the 
STS. This nuclear payload risk study Is being undertaken by the DOE for 
NASA. The study approach Is outlined by the following tasks: 

1. Assess which failure inodes (In addition to those developed 
under Contract NAS 10-9374 for the STS) require to b: Included 
In the analysis. List such additional failure modes with the 
Item or Items of Centaur hardware Involved. Only category one 
failure modes will be Included and this will require reference 
to General Dynamics documentation and other references as 
necessary. 

2. Group failure modes according to their affect on the combined 
STS/Centaur vehicle In each of the relevant STS/Centaur flight 
phases. 

3. Assign failure rates to each hardware component contributing 
to catastrophic failure In each of the flight phases, for each 
vehicle response mode. 

4. Compute failure probabilities for each combined STS/Centaur 
vehicle response mode (resulting from a category one failure) 
from liftoff to Centaur separation from the Orblter. 
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Section 2 outlines the limits of this study and lists the assumptions 
made In the analysis. Certain failures were considered to be outside 
the scope of this analysis since they would not pose a problem to the 
nuclear payload. Note that some of these excluded failures could play a 
significant role In the likelihood that the STS will return to base 
safely after the payload has been deployed. The failure definition, 
l.e., that which results In loss of payload, constrained which STS 
failures were to be Included In the analysis. Once the payload has 
successfully been deployed, a re-entry failure of the STS Is of no 
consequence. 

Loss of payload Is directly relataole to failure of components and/or 
systems of the STS/Centaur. Failure of certain critical components and 
systems could lead directly to catastrophic failure of the combined 
vehicle. This Is the approach taken in this study, where component 
failures are grouped according to expected vehicle response modes. 

These catastrophic vehicle response modes are listed In Section 3. 

The Reactor Safety Study, WASH-1400 [Reference 1], data base was used as 
a starting point for the development of failure rates as outlined In 
Section 4’. • The WASH- 1400 study collected data from numerous sources . 
Including NASA data. It is Important to point out that the WASH-1400 
data base was merely used to obtain an Indication of suitable bounds for 
component failure rates. Many of the components used on the STS/Centaur 
compromise pumps, pipes, valves, pressure vessels, etc., whose failure 
rates are expected to fall within the ranges for similar components as 
presented in the WASH-1400 document. 

Section 5 outlines the method of calculation of the failure probabil- 
ities for each relevant STS/Centaur response mode which could compromise 
the nuclear payload. The method of calculation used certain simplifying 
assumptions which, given the expected low probability of event occur- ' 
rence, are not likely to significantly affect the final results. A 



previously-developed computer program Was used In this stage of the 
analysis. 

Finally, Section 6 presents the results of this combined STS/Centaur 
analysis. 
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2 . 


ASSUMPTIONS AND LIMITS OF STUDY 


This study was United to calculating STS/Centaur failure response 
probabilities from liftoff to Centaur-STS separation. 

The list of potentially hazardous failures for the STS was obtained from 
the Critical Items List (CIL) documentation and various Interfacing 
systems documentation, etc. [References 2, 3, 4, 5, 6 and 7]. This list 
of STS failure modes was defined In previous J.H. Wiggins Company 
studies under contract NAS 10-9374. The list of Centaur failure modes 
was drawn up from Centaur technical description documentation [Refer- 
ences 8 and 9] and through consultation with General Dynamics personnel. 

The CIL documents for the Orblter, External Tank and SRBs listed 
failures as criticality 1, 2, 3, IR, 2R or 3 which are defined as 
follows [Reference 2]: 

CATEGORY POTENTIAL EFFECT OF FAILURE 


1 

IR 

2 

2R 

3 


Loss of life or vehicle 

Redundant hardware element, the failure, of 
which could cause loss of life or vehtcle 

Loss of mission; for GSE, loss of vehicle 
system 

Redundant hardware element, the failure of 
which could cause loss of mission 

All others 


Only Category 1 failures as defined here were Included In this study, 
which Is consistent with the earlier JNW analyses. There is a critical 
time period prior to liftoff which has not been Included, l.e., from To 
45 minutes to To, where liftoff occurs at To. This time period was 
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excluded by NASA from Initial JHW studies and has been excluded from 
this analysis. 

For the purposes of this study, the following assumptions were made: 

1. Criticality 1 failures will contribute almost entirely to 
catastrophic events. 

2. Failure probabilities per unit time of STS components are 
lognormally distributed. 

3. The omission of presently unrecognized criticality 1 failure 
modes will not significantly affect the final results. 

4. Common cause failures (sometimes referred to as common mode 
failures) will not significantly contribute to the hazard 
potential. 

The Implications of Assumption 4 are explained in detail In Reference 
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3. 


VEHICLE RESPONSE NODES 


For this study Centaur failure modes are considered to contribute to 
four categories of expected STS/Centaur behavior from liftoff to Centaur 
separation. These four categories are the following: 

• External Tank punctured 

• Fire and explosion in payload bay and Orblter tumbles to earth 
(prior to orbit insertion) 

• Fire and explosion in payload bay - on orbit 

• Centaur recontact with Orblter at separation 

Table 3-1 outlines the relevant Centaur failure modes which contribute 
to each of the above combined vehicle response modes. The expected 
response modes of the STS, excluding the effects of Centaur, are out- 
lined in Tables 3-2 and 3-3 and described in detail In References 10 and 
11 . 


Table 3-4 defines all potential response modes of the combined 
STS/Centaur vehicle, from liftoff through Centaur deployment from the • 
orblter. The carrying of Centaur In the Orblter payload bay does not ' 
change the vehicle response probabilities previously computed for case 
numbers 1, 2, 3, 4, 5, 7, 8 and 9 (see Reference 11) and 12 and 13 (see 
Reference 10) of Table 3-4. Cases 6, 10, 11 and 14 are either affected 
by, or result directly from, carrying Centaur in the Orblter. The 
computed vehicle response probabilities for these latter four cases are. 
the central requirements of this study. These results, along with those 
computed In earlier studies, are presented in Section 6. 

A summary of the failure modes relevant to this study from liftoff to 
Centaur separation from the Orblter are listed in Tables A-l through A- 
3, B1 and Cl through C4 of the Appendix. (Tables 81 and Cl through C4 
are extracted from References 11 and 10, respectively.) These tables 
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Table 3-1. Vehicle Response Modes and Centaur Failure Mode Contributors 


NO. 

VEHICLE RESPONSE 
MODE 

CRITICAL TINE PERIOD 

CENTAUR FAILURE MOOES CONTRIBUTING 
TO THE HAZARD* 

■m 

EXTERNAL TANK 

LIFTOFF TO ET SEPA- 

FAILUktS IN THE FOLLOW IMG SYSTEMS 


PUNCTURED 

RATION (LIFTOFF TO 
HECO a 16 SECS.) 

WHICH PROPAGATE TO THE EXTERNAL 
TANK . 

• FUEL TANKS 

• PROPULSION 

• TANK PRESSURIZATION 

• PRESSURE REGULATION 

• PURGE 

• VENTING 

• FILL. ORAIN, & DUMP 

6 INTERMEDIATE BULKHEAD RELIEF 

• C1SS HELIUM SUPPLY 

• CENTAUR HELIUM SUPPLY 
t REACTION CONTROL 

• HYDRAULICS 

• PNEUMATIC VALVE CONTROL 

• CENTAUR SUPPORT STRUCTURES 

2 

FIRE t EXPLOSION IN 
PAYLOAD BAY - ORBITER 
TUMBLES TO EARTH 

MECO ♦ 16 SECONDS TO 
ORBIT INSERTION (ENO 
0MS1 BURN) 

SAME FAILURE MOOES AS FOR NO. 1. 

3 

FIRE 1 EXPLOSION IN 
PAYLOAD BAY - ON 
ORBIT* 

(I) ENO OMS 1 BURN 
TO OPENING Of 
PAYLOAD BAY 
000RS 

(D) OPENING PAYLOAD 
BAY DOORS TO DE- 
PLOYMENT* 

(a) SAME FAILURE MOOES AS FOR NO. 1. 

(b) SAME FAILURE MODES AS FOR NO. 1 

EXCLUDING THOSE WHERE H, TANK 
RUPTURES FIRST. ‘ 

■ 

CENTAUR RECONTACT AT 
SEPARATION WITH 
ORBITER 

DEPLOYMENT 

• FAIL TO SEPARATE RISE-OFF FLUID 
DISCONNECTS 


^External tank and.orbiter failure modes which contribute to this hazard (vehicle 
response - external tank punctured) are contained In References 10 and 11. 

*A fire and explosion In the payload bay, resulting fro* direct or propagated 
rupture of Centaur fuel tanks, could propagate directly through the base of the 
Orblter, or indirectly via an OHS/RCS pod or the main engine compartment. 

3 Th1s vehicle response node Is broken Into two distinct time periods according to 
failure mode contributors. In the first time period (i), the payload bay doors are 
closed and all failure modes for case number 1 vehicle response are relevant. Once 
tne payload bay doors are opened, an atmosphere Must be available to support a 
fire and explosion. If the hydrogen tank falls, this need not lead to a failure 
of the oxygen tank and so, with no atmosphere, the result Is likely to be benign. 

^Hydrogen tank failure modes have been excluded as contributors to vehicle response 
number 3(b), for the time period beginning when the payload bay doors open, witn the 
payload bay doors closed, however, an atmosphere is available to supoort an explosion 
Initiated by a hydrogen tank rupture. If the oxygen tank ruptures first then the 
hydrogen tank Is likely to fall with a resulting nixing of hydrogen and oxygen. A 
suitable Ignition source could cause this partially confined mixture of propellants 
to explode, even with the payload-bay doors open. Although there would be no pressure 
wave with an explosion In this envl ronwsnt. the large volume of propellants would 
result In an exploston of quit* high yield which would Impart considerable energy to 
fragmented components of the Centaur and Orblter. 
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Table 3-3. STS Vehicle Response Modes - MECO to Payl. cd Deployment 


cm 

No. 

VEHICLE BEHAVIOR 

critical time period 

NECESSARf CONDITIONS 

(a) 

Enternal Urt 
Punctured 

MECO to ET ttoaration 
(MECO to MECO • 16 
seconds) 

During OrbiterfET 
Separation Maneuver 
(MECO ♦ 11 seconds 
to end of PCS separ- 
At Ion burn) 

MECO to MECO • 1 1 
seconds 

• Failures in Main Pronulslon System 
releasing residual propellant into 
#ft ME compartment and i qn 1 1 1 on from 
within N£ compartment 

• LH 2 tank rupture 

• Failures in the Orbtter/ET 
Separation System 

• Failures Of Forward or aft Orpiter 
ET attachments 

• Inadvertent operation of the PSCD 

A Failure of the forward or a't TCS 
system 

• Failures of the 0J*S svste<-s which 
propagate and cause loss o* .ICS 

t Aft ACS Or CMS failures which 
propaqate to ME compart-en* and 
cause fire and emission with 
residual HE propellants 

(b) 

Lott of Maneuver- 
ability & Orbtter 
Tumbles to Earth 

MECO to orbit inser- 
tion (end of OMS1 burn) 

e r a>'unes of forward PCS which pro- 
caoite and cause 'ailure o' all 

3 IMUs 

e Failures of aft RCS which pro-agate 
and lead to loss of C'S in r»- ? ?od 
(with lost capability to cress feed 
to Other OMS engine ). 

• Failures of OMS in one nod 'iw'th 
lost capability to cross feed to 
Other OMS engine) 

A Failures of electrical po*er or 
atmosphere revital ijaticn sister 
tank sub-assemblies which bro-anate 
and cause failure of al' 3 l'\s 

U) 

Lett of Haneuver- 
abi I i t v on Orbit 

End 0M$! burn to 
payload deployment 

a Sane conditions as for (b) 

(d) 

Fire A Evplosion 
in ME Cornartment 
ana Orbiter Tumbles 
to Earth 

MECO * 16 seconds 
to Orbit Insertion 
(end 0MS1 burn) 

e Failures in the aft R C S or 0 M S which 
propagate to the ME eomnart»*<it 
causing fire and esplos'on 
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Table 3-4. Corabined STS/Centaur Vehicle Response Modes (Cont'd) 
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describe which particular Item failed, the numbers of items Involved, 
the types of failure modes, the subsystems affected (critical time 
periods) upper and lower bounds on the Item failure rates and ar\y 
assumptions made. 

Weighting factors have been Included In Tables A1 through A3, Bl and Cl 
through C4 to reflect the conditional probability that, given failure of 
an Item of hardware, a criticality 1 condition will occur. For Tables 
Cl through C4, this Is a departure from the approach taken In the 
earlier analysis (Reference 10). Because these conditional probabil- 
ities, provided by NASA, were considered to be realistic for the "Space 
Shuttle Range Safety Hazards Analysis" (Reference 11) It Is reasonable 
to be consistent and Include them for all hardware Items. These con- 
ditional probabilities are specified In the tables of the Appendix using 
mnemonics as follows: 

ACT: actual, ipss. The probability of a criticality 1 condition 
Is 100 percent. 

PROB: probable loss. The probability of a criticality 1 con- 
dition Is between 5 and 100 percent, except for SR8 components 
•where a. value between 10 and 100 percent was used. 

POSS: possible loss. The probability of a criticality l con- 
dition is between 0 and 5 percent, except for SR8 components 
where a value between 0 and IQ percent was used. 

NONE: The probability of a criticality 1 condition Is essential- 
ly 0. 

The weighting factor Is used as a multiplier on the hardware failure 
rate to obtain the "critical" failure rate used In this analysis. The 
median value of the weighting factors were used (l.e., 10 to 100 percent 
is 55 percent) . 


4. 


DATA BASE AND ASSIGNMENT OF FAILURE RATES 


WASH-lAQQ's data sources Included Department of Defense data, NASA data 
and general Industrial operating experience as well as nuclear power 
plant data. The Reactor Safety Stu.^y assessed the data sources and 
defined the ftve percent lower bound and ninety- five percent upper bound 
on component failure rates and demand probabilities. The five percent 
lower bound Indicates that five percent of failure rates are expected to 
be found below this value. The ninety-five percent upper bound value 
indicates that ninety-five percent of the failure rate values are ex- 
pected to be found below this value. Thus, there Is a ninety percent 
probability that the failure rate values will fall within the five 
percent and ninety-five percent bounds. 

By comparing components of the STS/Centaur with those of similar com- 
ponents of the WASH-1400 data base, judgements were made as to the 
expected range of failure rates for STS/Centaur vehicle components. The 
expected upper and lower bounds of failure rates of components relevant 
to this study are Included In Tables A-l through A-3, B1 and Cl through 
C4 of the Appendix. Thus, the component failure rates are treated as 
random variables viewed as having a range of possible values. The exact 
nature of the variability of the component failure rates Is described by 
the probability density function. The probability density functions for 
STS/Centaur component failure rates are assumed to be log normal distri- 
butions. This Is In keeping with the variability in failure rates found 
by the Reactor Safety Stucty on analyzing data from mechanical 
components. 

The log normal distribution, describing the variability In failure rates 
of components making up the STS/Centaur systems, Is written mathematic- 
ally as follows: 

for x>0 

& a > 0 


F{ A) 


I 

Xo/ZiT 


exp 


! lnx-u) 

2 — 

2u 


Mode: 



\n * exp( u -o 2 ) 

Median: X 0#5 ■ exp( u ) - /x^T’ 

Mean: X ■ exp(u*o Z /2) 

2 2 2 
Variance: p » exp(2u+o ) • [exp(o )-l] 

Where x Is the component failure rate In number of failures per a given 
time period; x u Is the failure rate upper bound and x^ Is the failure 
rate lower bound. 

The logarithms of the values of the random variables of a log normal 
distribution are normally distributed (l.e., belong to a normal or 
Gaussian distribution function). Hie skewedness of the log normal 
distribution allows one to account for rather high, or unlikely, com- 
ponent failure rates. The log normal distribution was therefore used to 
bound the expected failure rate values for STS/Centaur components. 
Failure rates were assumed to remain constant with time. In other 
words, e.g.i a shift In the mean value of a failure rate for a component 
with time was not considered In this analysis. This assumes (a) that 
the Incidence of burn In failures will not significantly affect the 
results and (b) that the Incidence of wear-out failure will not signifi- 
cantly affect the results. 
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5. 


VEHICLE RESPONSE MODE FAILURE PROBABILITY CALCULATIONS 


Since only category l failures are considered In this analysis, the 
failure rate for each STS/Centaur response mode can be calculated from 
the following Boolean expression: 

X - X, U X 2 U Xj U ... U x n U) 

where X^ are the Individual component failure rates for each response 
mode and U represents the union of events, l.e., plus In Boolean 
notation. 

Expansion of this Boolean equation into probability form Is obtained 
using the following expression: 

n n 1-1 n 1-1 j-1 

«*>■£>(«,) -ZE p(*,)p(*j) ♦ EEE PCx t )P(Xj)PCx k ) 

1-1 1-2 J-1 1*3 j-2 k*l 

♦ (-i) n_1 n p(x,) (2) 

i-i 

. or . P(X) * Sum of Individual probabilities 

- Sum of products of two at a time 

♦ Sum of products of three at a time 

- etc. 


t Product of all 
For two components 

P(X) - P(XJ + P(X 2 ) - P(X lA X z ) (3) 
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where P(X x aX 2 ) is written as P(X 2 A 1 )*P(X 1 ) 

For Independent events where failures X t and X 2 are not correlated 
P(X) - P(Xj ♦ P(X 2 ) - P(Xi)*P(X 2 ) (4) 

For snail failure rates, terms such as P(X 1 )-P(X 2 ) can be neglected. 
Then 


PCX) - P(XJ ♦ P(x 2 ) (5) 

Neglecting 2nd and higher order terms in this analysis will have 
negligible effect on the final results, as the Individual expected 
failure rates of STS/Centaur components are expected to be small (see 
Tables A-l through A-3, 81, and Cl through C4 of the Appendix). 

Equation (2) neglecting 2nd and higher order terms becomes 
. n 

PCX) * 2>(*l) (6) 

1*1 

This Is the form for PCX) used In this analysis. 

The computer program developed under contract NAS 10-9374 was used to 
calculate the mean and SQ% bounds of PCX) for each combined vehicle 
response mode from liftoff to Centaur-STS separation. Input to the 
program Is the upper and lower bounds of each lognormal ly distributed 
component failure rate. 

Each response mode failure probability can be presented as an a-priori 
probability or as an a posteriori probability. The a-prlorl value Is an 
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unconditional probability and is only concerned with the event at time t 
l.e.. It Is the probability of failure In the interval t to t + dt 
without any regard to whether prior failure has occurred. The a- 
posterlorl probability Is a conditional probability and Is a more com- 
plete answer since It Is calculated with regard to whether prior failure 
has occur *ed. 

The failure probabllltles/second as calculated by the program are the a- 
posterlorl failure probabilities. It will, however, be useful to quote 
these probabilities over the complete time period during which each 
response mode can occur. The equation for performing this calculation 
Is derived in the following manner, assuming a negative exponential 
distribution for component mortality: 

T+t T+t 

p fan ure -/ f(T)dT -/«' U ' 1T 
T T 

- e‘ XT (l-e“ Xt ) (7) 

(Equation ( 7 ) Is the a-.prlorl probability of failure In the period T to . 
T+t. This equation must be divided by the probability of survival up to 
time T to obtain the a-posterlorl probability of failure. 


Therefore 


-AT 


failure 


u 


-XT 


-At. 

S 1 


1-e 


-At 


( 8 ) 


l.e., for the exponential distribution of mortality and constant failure 
rate x, the equation Is Identical to that for the cumulative probability 
of failure from >0 to T*t. In this analysis however, t Is the time 
period during which each response mode can occur. 
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6. RESULTS 

The results of this study are presented In Table 6-1. The results of 
the study covering flight phases from liftoff to MECQ, which excludes 
the Impact of Centaur failure modes, are presented in Tables 6-2 and 6-3 
(taken from Reference 11). The results of the stud|y covering flight 
phases from HECO to payload deployment, which also excludes the Impact 
of Centaur failure modes, are presented In Table 6-4 (taken from Refer- 
ence 10). Table 6-5 consolidated table for all flight phases, from 
liftoff through payload deployment, which Includes the impact of carry- 
ing Centaur In the STS. Table 6-6 defines the Item failure modes. In 
terms of the tables of the Appendix, relevant to each vehicle response 
mode. 

AIT of these tables, 6-1 through 6-5, contain the conditional failure 
probabilities per second from liftoff to payload separation, l.e., the 
failure probabilities In the time period t to t+1 seconds given that a 
failure has not occurred prior to t. The probability values are pre- 
sented, as. a. mean with upper and lower bounds, consistent with the use of 
the lognormal distribution to describe the uncertainty in component 
failure rates. Given the nature of the uncertainty In an analysis of 
this nature, a point estimate value would prove to be less than useful. 

The interval failure probabilities from liftoff to payload separation 
can be calculated using the failure rates of Table 6-5 and equation 8 of 
Section 5 where t Is the time period in each Interval. It is apparent -■ 
from equation 8 that these interval probability values will increase 
with Increasing value of t, l.e., the longer the Interval, the higher 
the probability of failure. The Interval failure probabilities have not 
been calculated here since, at the time of writing, the exact time 
values for the Galileo flight (with Centaur) were not known. (Refer- 
ences 8 and 12 offer conflicting Interval time values, from liftoff 
through payload deployment.) However, these interval failure probabil- 
ities can be calculated in a few minutes with the aid of a calculator. 
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Table 6-1. Response Mode Failure Rates - Including Impact Of Centaur 
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♦PROBABILITY OF .FAILURE PER SECOND. (EXCEPT FOR RESPONSE MODES 1 AND 8) 1. TAKEN FROM REFERENCE IT. 

♦PROBABILITY OF FAILURE PER EVENT. (Liftoff to MECO) 

♦THIS MODE IS MUCH MORE LIKELY TO OCCUR DURING STAGE I FLIGHT 2 CONTRIBUTES TO NO 6 of 

WHEN THE LOADS AND HEATING ARE HIGH. ’ TABLE 6-1 




Table 6-3. Estimated 'Loss of Control and Tumble' (SRB ] 

Case/Wozzle Failure) Failure Kates (From j 

Reference 11) | 


TIME SPAN 
(SEC.) 

FAILURE RATE (1/SEC.) 

CASE 1 , 

(TOTAL PROBABILITY • 2 x 10“ 3 ) 

CASE 2 

(TOTAL PROBABILITY • 2 x lU“ 4 ) 

0-10 

7.2E-5 

7.2E-6 

10-70 

1.9E-5 

1.9E-6 

70-125 

2.6E-6 

2.6E-7 










Table 6-4. Response Mode Failure Rates - Excluding Impact Of Centaur 
(MICQ To Payload Deployment) 




Contributes to ho. io of table 6-1 


Table 6 - 5 . Response Mode Failure Rates - Including Impact of Centaur iLlftoff To Payload Deployment) 
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Table 6-5. Response Mode Failure Rates - Including Impact of Centaur (Liftoff To Payload Deployment) (Cont’d) 



■probability of failure per event. 

THIS MODE IS MUCH MORE LIKELY TO OCCUR DURING STAGE I FLIGHT WHEN THE LOADS AND 
HEATING ARE HIGH. 



Table 6-6. Item Failure Modes Relevant to Each Vehicle Behavior Mode - liftoff to Payload Separation 






It Is worthwhile noting some Interesting results as outlined In Tables 
6-1 through 6-5. The first of these Is that the Category 6 vehicle 
response mode probabilities, for the period liftoff through MECO, are 
roughly a factor of two higher with Centaur In the Orblter payload bay 
as contrasted with an empty payload bay. This Is evident from a com- 
parison of the failure rates for case number 6 of Table 6-1 with case 
number 6 of Table 6-2. 

The failure rates generated for case number 6, for the period MECO to 
completion of RCS separation burn, cannot be directly compared from the 
results of Table 6-1 and Table 6-4. Table 6-4, case (a), was generated 
under a previous contract (Reference 10) without the application of 
weighting factors on the component failure rates.* If weighting factors 
had been employed In this earlier study, the effect would have been to 
reduce the case (a) (External Tank Punctured) failure probabilities 
quite significantly. The application of weighting factors on the com- 
ponent failure rates, for this combined STS/Centaur study (but not In 
the earlier STS study from MECO to payload separation), accounts for the 
apparent anomally between the results of category 6 (Table 6-1) and case 
(a) of Table 6-4 (for the period during RCS separation burn). 

A further comparison can be made between case number 10 of Table 6-1 and 
case (d) of Table 6-4. These are essentially the same cases, where 
number 10 of Table 6-1 Is for the combined STS/Centaur vehicle and case 
(d) Is for the STS only. (The failure modes contributing to case (d) of 
the earlier study contributed to case number 10 of this study for the 
combined vehicle. All component failure rates were assigned n weighting 
factor In this combined vehicle analysis.) The effect of carrying 
Centaur In the Orblter Is to Increase the failure rate for case number ' 

*The application of weighting factors was suggested by RASA, and Im- 
plemented by the J.H. Wiggins Company, for the STS Range Safety 
Hazards Analysis (Reference 11). This analysis was completed about 
21 months after the STS failure probabilities, from KECO to payload 
separation, were produced (Reference 10). 
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10 by a factor greater than two. This difference would be even more 
marked than is evident from a comparison of Tables 6-1 (case 10) and 6-4 
(case (d)). If weighting factors had been applied to the component 
failure rates In the earlier analysis (case ( d) > . 

Table 6-5 presents all fourteen combined STS/Centaur response mode 
failure rates from liftoff to payload deployment. This combined table 
is an amalgamation of Tables 6-1, 6-2 and 6-4. 

Cases 12 and 13 of Table 6-5 present failure rates which were computed 
from an earlier analysis (Reference 10). As a consequence, and because 
transporting Centaur In the Orblter did not impact cases 12 and 13, 
their probability values do not reflect the Impact of weighting factors 
on the component failure rates. For cases 12 and 13 of Table 6-5, 
therefore, the failure rates quoted are likely to be high by a factor 
estimated between 2 and 5 (assuming the NASA weighting factors are 
valid). • 

One further point Is worth noting; that Is that the results presented 
in Table 6-5 do not Include the impact of potential Spacecraft failure 
modes. Although the Inclusion of Spacecraft failure modes was outside 
the scope of this study,' their potential Impact should be considered. 

On the positive side, however, the impact of Spacecraft failure modes on 
the final results, as presented In Table 6-5, Is likely to be small. 

It Is Important to note that no credit has been taken In this study for 
emergency procedures which could In certain circumstances mitigate the 
effects of certain component failure modes. These procedures will have 
Increasing chances of success with successively higher time periods In 
which action can take place. The time available for mitigating actions 
related to vehicle response inodes I through 10 (Table 6-5) are relative- 
ly short and, given the nature of these vehicle failure modes, any 
action is likely to be unsuccessful. Mitigating actions are, however, 
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likely to be highly relevant to vehicle behavior mode 13. The component 
failures listed for the aft RCS and OMS contributing to response mode 13 • 
may, in certain circumstances, be circumvented by actions of the crew. 
Although it was not part of the objective of this study to consider 
mitigating actions, the results quoted must be considered against this 
backdrop. 
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APPENDIX A 


CENTAUR FAILURE MODES 
(Liftoff to Centaur Deployment) 

(Contributing To Combined STS/Centaur Behavior Mode', 
Nos. 6, 10, 11(a), 11(b) and 14, As Outlined In Table 3-4) 


The failure rates quoted In this Appendix are In units 
of hour,"* unless otherwise stated 
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Table A-l. Centaur Failure Modes Contributing To STS/Centaur Behavior Modes - 
Categories 6, 10 and 11(a) (Page 1 of 8) 

HO, 

VEHICLE AMO SUB- 
SYSTEM 

ITEM 

NO. 

ITEMS 

failure mooe 

FAILURE RATE 

L, 

HE1GMTUG 

FACTO* 

i 

TANK STRUCTURE 1 

CYLINDRICAL LH 2 TANK HELDS 

t 

HELD RUPTURE 

1.00E-07 
1. 001-10 

ACT 

2 

TANK STRUCTURE 

FORHARO BULKHEAD HELDS 

12 

HELD RUPTURE 

1.00E-07 

1.Q0E-10 

ACT 

3 

TANK STRUCTURE 

FORHARO TANK RING HELDS 

2 

HELD RUPTURE 

1.00E-07 

1.00E-1U 

ACT 

4 

TANK STRUCTURE 

AFT LH Z TAW RING HELDS 

2 

HELD RUPTURE 

1.00E-07 

1.00C-10 

ACT 

s 

TANK STRUCTURE 

LM 2 TAW CONICAL TRANSITION 
HELDS 

11 

HELD RUPTURE 

1 .00E-07 
1.0QE-10 

ACT 

e 

TANK STRUCTURE 

L0 2 TAW AFT RIN6S HELDS 

4 

HELD RUPTURE 

1 .00E-U7 
1.00E-10 

ACT 

7 

TANK STRUCTURE 

CYLINDRICAL L0 2 TAW HELDS 

2 

HELD RUPTURE 

l.OOE-07 

1.00E-1U 

ACT 

H 

TANK STRUCTURE 

DOUBLE HAILED INTERMEDIATE 
BULKHEAD HELDS 

24 

HELD RUPTURE 

1 .OOE-07 
1.00E-10 

ACT 

9 

TANK STRUCTURE 

AFT' BULKHEAD HELOS 

B 

MELD RUPTURE 

I. OOE-07 
l.QOE-lu 

ACT 

10 

TANK STRUCTURE 

FORHARO DOOR HELD 

1 

HELD RUPTURE 

1. OOE-07 
1.00E-10 

ACT 

11 

TANK structure 

ln 2 TAW ENGINE FEED FITTING 

1 

RUPTURE OF FITTING OR AT 
TANK TO FITTING HELD 

1.00E-05 

l.OOE-OU 

ACT 

12 

TANK STRUCTURE 

lo 2 TANK ENGINE feed fitting 

1 

RUPTURE OF FITTING OR AT 
TANK TO FITTING HELD 

l.OOE-OS 

i.OOE-OB 

ACT 

13 

PROPULSION SYSTEM* 

L0, FEED DUCT 3 (FROM TANK 
TO ,L0 2 PRE-YAJ.YE) . . 

l SET 

RUPTURE OR GROSS LEAKAGE 

2.00E-U4 
2. OOE-07 

•ACT 

14 

PROPjLSION SYSTEM 

lo 2 feed DUCT PRE- VALVE 

1 

RUPTURE OR GROSS LEAKAGE 

2.0QE-U7 

2.00E-09 

ACT 

15 

PROPULSION SYSTEM 

LN, FEED DUCT 3 (FROM TAW TO 
LMj PRE- VALVE) 

1 SET 

RUPTURE OR GROSS LEAKAGE 

2.00E-04 
2. 00E-07 

ACT 

/ 

PROPULSION SYSTEM 

LHj FEED OUCT PRE-VALVE 

1 

RUPTURE OR GROSS LEAKAGE 

2.00E-U7 

2.00E-09 

ACT 

/ 17 

i 

/ 

' lb 

T kHK PfiESSURUATIOH 
SYSTEH* 

FLEXIBLE LINE (BEfNEEN C1S5 
A DEPLOYMENT ADAPTER) 

1 

GROSS RUPTURE 

2.00E-OS 
2 .OOE-uo 

9H2L 

Yank PRESSURIZATION 
SYSTEM 

LUES A FITTINGS <4000 PSI 
SECTION UP TO OR IF ACE IN DE- 
PLOYMENT ADAPTER) 

1 SET 

GROSS RUPTURE 

2.00E-04 
2. OOE-07 

PRC3 

19 

tank PRESSURIZATION 
System 

MANUAL SHUTOFF VALVE (IN DE- 
PLOYMENT ADAPTER) 

2 

GROSS RUPTURE 

1. OOE-07 
1.00E-09 

p*Co 

20 

• 

tan* PRESSURIZATION 
SYSTEM 

DEPLOYMENT ADAPTER FILTER 

1 

GROSS RUPTURE 

1.00E-U5 
1 ,001 -go 

pa*- 

21 

TANK PRESSURIZATION 
SYSTEM 

PILOT OPERATED SOLENOID 
VALVE (IN DEPLOYMENT ADAPTER) 

20 

GROSS RUPTURE 

1.00E-07 

l.OOE-OV 

p*c& 

22 

TANK PRESSURIZATION 
SYSTEM 

0R1FACE UN DEPLOYMENT 
ADAPTER) 

« 

GROSS RUPTURE 

1.0UE-07 

1.00E-09 

pais 

23 

TANK PRESSURIZATION 
SYSTEM 

LUES i FITTINGS (BETHEEN 
0R1FACES 4 DISCONNECT PANELS 
<y 4000 PSI) 

1 SET 

GROSS RUPTURE 

S.00E-05 

S.OOE-Od 

POSS 

24 

TANK PRESSURIZATION 
SYSTEM 

FLEXIBLE LUL UETWEEN CENT- 
AUR 4 DCPlOTMCNT ADAPTER) 

1 

GROSS RUPTURE 

1.00E-05 

l.OOE-W 

POSS 


I 



, Table A-l. Centaur Failure Modes Contributing To STS/Centaur Behavior Modes - 

/* Categories 6, 10 and 11(a) (Page 2 of 8) 


failure rate 


NO. 

VEHICLE AM) SUB- 
SYSTEM 

ITEM 

NO. 

ITEMS 

FAILURE MOOt 

V‘k 

NEtGHTlNG 

FACTOR 

25 

Tana PRESSURIZATION 
SYSTEM 

OXIDIZER i FUEL DISCONNECTS 

2 

MOSS RUPTURE 

1.00C-U7 

1.00E-U9 

pass 

26 

tank PRESSURIZATION 
ststeh 

CHECK VALVE (LO, TANK SIDE 
IN CENTAUR) 

l 

RUPTURE OR MOSS LEAKAGE 5 

2.00E-07 

2.00E-09 

ACT 

27 

tank pressurization 
ststeh 

CHECK VALVE <LM, TANK SIDE 
IN CENTAUR) 

1 

RUPTURE OR MOSS LEAKAGE 5 

2.00E-Q7 

2.00C-09 

ACT 

28 

TANK PRESSURIZATION 
STSUN 

CHECK VALVES (FURTHEST FROM 
LOj 4 LHj, TANKS) 

2 

MOSS RUPTURE 

1.00E-07 

1.00E-09 

POSS 

29 

TANK PRESSURIZATION 

ststeh 

0R1FACES (IN CENTAUR LO, 
TANK SIDE) 

2 

RUPTURE OR MOSS LEAKAGE 5 

2.00C-07 

2.00E-09 

ACT 

su 

Tank PRESSURIZATION 
STSTEH 

0R1FACES (IN CENTAUR LH, 
TANK SIDE) * 

4 

RUPTURE OR MOSS LEAKAGE 5 

2.00E-07 

2.00E-09 

ACT 

21 

TANK PRESSURIZATION 
STSTEH 

PILOT OPERA TEO SOLENOID 
VALVE (LO, TANK SIDE NEAREST 
ORIFACE) 

2 

RUPTURE OR MOSS LEAKAGE 5 

2.00E-07 

2.0UE-U9 

ACT 

22 

TANK PRESSURIZATION 
STSTEH 6 

PILOT OPERATEO solenoid 
VALVE (LHj TANK S10EI 

6 

RUPTURE OR MOSS LEAKAGE 5 

2.00E-07 

2.00E-U9 

ACT 

22 

TANK PRESSURIZATION 
STSTEH 

LINES 4 FITTINGS (FROH LO, 
TANK. TO 1ST SOLENOIO VALVT 
4 1ST CHECK VALVE) 

l SET 

RUPTURE OR MOSS LEAKAGE 5 

2.00E-04 

2.0UE-U7 

ACT 

24 

Tank pressjRIZATIOn 
STSTEH 

LINES 4 FITTINGS (FROH LH, 
TANK TO 1ST SOLENOID VALVE 
4 1ST CHECK VKLVE) 

l SET 

RUPTURE OR GROSS LEAKAGE 5 

4.00E-04 

4.00E-07 

ACT 

25 

tank PRESSURIZATION 
STSTEH 

PILOT OPERATEO SOLENOIO 
VALVES ( TWO VALVES ON EAT* 

tank side furthest from ori- 
FACES) 

4 

GROSS RUPTURE 

1.00E-07 

1.00E-09 

POSS 

26' 

' TANK pressurization 
ststeh' 

CHECK VALVES (NEAREST LH, 
TAML on GHj CHARGE LINE) 

2 

RUPTURE OR MOSS LEAKAGE 5 

2.00E-07 

2.00E-09 

. . ACT 

27 

tank PRESSURIZATION 
STSTEH 

ORIFACE (BETWEEN LH, 
PRCSSuRIZATIOH LINE 4 GM, 
CHARGE LINE) ‘ 

i 

RUPTURE OR MOSS LEAKAGE 5 

2.00E-07 

2.00E-U9 

ACT 

28 

TANK PRESSURIZATION 
STSTEH 

LO, TANK PRESSURE TRANSDUCERS 
4 FITTINGS 

$ 

RUPTURE OR MOSS LEAKAGE 5 

2.00E-U5 

2.00E-0O 

ACT 

29 

tank pressurization 

STSTEH 

LH, TANK PRESSURE TRANSDUCERS 
4 FITTINGS 

5 

RUPTURE OR MOSS LEAKAGE 5 

2.0UE-J5 

2.00E-08 

ACT 

4u 

C1SS PRESSURE REGU- 
LATION STSTEH*' 6 

CISS MANUAL SHUTOFF VALVES 

2 

GROSS RUPTURE 

1.00E-07 
l.QUE-09’ - 

PROe 

4i 

C1SS PRESSURE REGU- 
LATION STSTEH 

CISS FILTER 

1 

GROSS RUPTURE 

1.00E-05 

1.00E-08 

PRa 

42 

Cl SS PRESSURE REGU- 
LATION STSTEH 

CISS DISCONNECT 

1 

MOSS RUPTURE 

1.00E-07 

1.00E-U9 

PRCo 

42 

Cl SS PRESSURE REGU- 
LATION STSTEH 

CISS LINES 1 FITTINGS (UP- 
STREAM Of REGULATORS) 

I SET 

GROSS RUPTURE (GETUEEM REGU- 
LATOR 4 1ST SOLENOID VALVE) 

1.00C-04 

I.UOE-07 

PRjt: 

44 

CISS PRESSURE REGU- 
LATION STSTEH 

CISS solenoid operated VALVES 
(UPSTREAM OF REGULATORS) 

2 

MOSS RUPTURE (VALVES NEAREST 
TO REGULATORS) 

1.00E-07 

l.OOE-09 

. . . PROS 

45 

CISS PRESSURE REGU- 
LATION STSTEH 

CISS CHECK VALVES 

4 

GROSS RUPTURE 

1.00E-07 

I.OOE-09 

POSS 

46 

CISS PRESSURE REGU- 
LATION STSTEH 

CISS PRESSURE TRANSDUCERS 4 
FITTINGS 

2 

MOSS RUPTURE 

l.OOE-OS 

l.OOC-ue 

POSS 

47 

CISS PRESSURE REGU- 
LATION STSTEH 

CISS REGULATORS 

2 

MOSS RUPTURE 

I.OOC-07 

i.u0E-09 

PR06 


Table A-l. Centaur Failure Hodes Contributing To STS/Centaur Behavior Modes 
Categories 6, 10 and 11(a) (Page 3 of 8) 


FAILURE rati 


*0. 

VEHICLE AMO SU6- 
STSTEH 

ITEM 

NO. 

ITEMS 

FA'LURE NODE 

V‘i 

neiG"*:n 

FACTOR 

46 

C15S PRESSURE REGU- 
LATION STSTEH 

CISS LINES A FITTINGS (DONN- 
STREAM OF REGULATORS) 

1 SET 

GROSS RUPTURE (FROM REGU- 
LATOR TO LAST SET OF PARAL- 
LtL VALVES) 

2.00C-04 

2.0UE-07 

POSS 

49 

C1SS PRESSURE REF- 
LATION StSTEH 

CISS SOLENOIO OPERA TEO VALTES 
(OMNSTREAH OF REGULATORS! 

2 

GROSS RUPTURE (VALVES NEAREST 
TO REGULATORS) 

1.00E-07 
i 001-09 

PQSS 

50 

C1SS PRESSURE REF- 
LATION STSTEH 

ciss/oeplothcnt ASA* TER 
flexible LINE 

I 

GROSS RUPTURE 

t.OOC-05 

1.00E-08 

POSS 

51 

C1SS PRESSURE REF- 
LATION StSTEH 

CISS SOLENOID VALVES (UP- 
STREAM OF REGULATORS) 

J 

GROSS RUPTURE (VALVES 

furthest from reguators) 

I.OOE-07 

1.0UE-09 

PROB 

52 

C1SS PRESSURE REF- 
LATION STSTEH 

CISS SOLENOID VALVES (DOWN- 
STREAM OF REGULATORS) 

) 

GROSS RUPTURE (VALVES 
FURTHEST FROM REGULATORS) 

I.00E-07 

1.00E-U9 

POSS 

55 

CISS PRESSURE REGU- 
LATION StSTEH 

CISS LINES t FITTINGS (UP- 
STREAM OF REGULATORS) 

I SET 

GROSS RUPTURE 1 FROM Ht SUPPLT 
TO 1ST SET OF PARALLEL 
VALVES) 

1.00E-04 

I.OOE-07 

PROB 

54 

CISS PRESSURE REGU- 
LATION STSTEH 

CISS LINES A FITTINGS ( DOWN- 
STREAM OF REGULATORS) 

1 SET 

GROSS RUPTURE (FROM LAST SET 
OF PARALLEL VALLES TO CISS/ 

deployment adapter flexible 

LINE) 

1.00E-04 

I.U0E-07 

POSS 

55 

PjRSE STSTEH* 

h» purge lines to 28 vac 
REC1RC PUMP. MOTORS- 

2 SETS 

RUPTURE OR LEAA1GE AND LOSS 

of motor purge 1 j (line from 
CR1FACE IN pneumatic ststeh 
TO MOTOR) 

2.0QE-D4 

2.00E-07 

POSS 

56 

PjRGE STSTEH 

CISS FLEXIBLE LINES 

2 

GROSS RUPTURE 

l.OOE-US 

).OOC-U6 

POSS 

57 

purge ststek 

DEPLOYMENT ADAPTER SOLENOID 
VALVES 

15 

GROSS RUPTURE (1ST SET OF 
PARALLEL VALVES TD INSULA- 
TION t engine purges and all 

VALVES TO LO,/LHj FILL/DRAIN/ 
VENT) * 

) .00E-U7 
) .OUE-09 

POSS 

56 

purge ststeh 

DEPLOYMENT ADAPTER LINES A 
FITTINGS (BETnEEN C1SS/DE- 
PLOYMENT ADAPTER Flex LINE 
A 1ST SOLENOID TAliES) 

l SET 

GROSS RUPTURE 

l.Qbt-Jb 

5.0UE-WO 

POSS 

55 

p-R^E ststeh 

DEPLOYMENT ADAPTER LINES A 
FITTINGS (CONNECTING SOLE- 
NOID VALVES. 0R1FACES. CHECX 
VALVES ETC.) 

1 SET 

GROSS RUPTuRE 

4.&U£-w4 

4,Qy£-yo 


6w 

purge ststeh 

DEPLOYMENT ADAPTER LINES A 
FITTINGS I BETWEEN 0J1FACES 

a fleuble line to tana in- 
sulation! 

1 SET 

GROSS RUPTURE 

I.ME-04 
l.Uwt- jo 

puss 

6: 

purge s»steh 

deployment adapter lines a 
FITTINGS (BETWEEN CRIFACES 
A ENGINE PURGES) 

l SET 

GROSS RUPTURE 

1 .UuE-UA 
l.OuE-ua 

P.uu 

62 

purge system 

deployment adapter flexible 

LUl i TO ENGINE PURGE) 

I 

GROSS RUPTURE 

l.OOE-uS 

1 .uoe-uo 

POis 

6J 

PJ»u£ S*STt* 

DEPLOYMENT ADAPTER FLEXIBLE 
LINE (TO TANA INSULATION) 

1 

GROSS RUPTURE 

1.001*05 

l.OOC-uo 

POSs 

64 

purge ststeh 

DEPlOmEWT lOAPTTa T/Utt. ]*- 
SUIATIOH DiSCOWtCT 

1 

GROSS RUPTURE 

l .0O£-y7 
1 .v0£*yi 

PuSS 

65 

purge ststeh 

CENTAUR LINES A FITTINGS (TO 
LD, A IH, TANA PRESSURI2A- 

I SET 

RUPTURE ON LEAFAGE 11 

4,0O£-y4 

4.L01-U? 

ACT 


Tib* llkt , 102 U*7 $u*0 
PIPC. L0 2 TAJif 
TJU)»SD UCE35 t TC » I 


Table A-l. Centaur Failure Modes Contributing To STS/Centaur Behavior Modes - 
Categories 6, 10 and 11(a) (Page 4 of 8) 


NO. 

VEHICLE AND SUB- 
STSTEM 

ITEM 

NO. 

ITEMS 

FAILURE MODE 

FAILURE rate 
a . A, 

M t 

NEIGHTING 

FACTOR 

DO 

PURGE SYSTEM 

CENTAUR OR IP ACES (TO LO, 
TANA PRESSURE TRANSDUCERS, 
ETC.) 

4 

RUPTURE OR LEAKAGE 

2.00E-07 

2.00E-U9 

ACT 

67 

PURGE SYSTEM 

CENTAUR OAIFACC (BETWEEN 
PYRO VALVE AnO INSULATION 
PURGE LINE) 

1 

GROSS RUPTURE 

1.00E-07 

1.00E-09 

POSS 

00 

purge system 

CENTAUR 0R1FACE (TO HYDRAU- 
LIC RECIRC. MOTOR PURGE) 

2 

GROSS RUPTURE 

1.00E-07 

1.00E-09 

POSS 

d9 

purge system 

CENTAUR CHECK VALVE (NEAREST 
TO lO, TANA PRESSURE TRANS- 
DUCERS) 

1 

RUPTURE OR LEAKAGE 

2.00E-07 

2.00E-09 

ACT 

7u 

PURGE SYSTEM 

CENTAUR CHECK VALVE 

(furthest from lo 2 ta* 
PRESSURE TRANSDUCERS) 

1 

GROSS RUPTURE 

1.00E-D7 

1.00E-09 

POSS 

71 

PURGE SYSTEM 

CENTAUA PYRO OPERATEO VALVE 

(to press, trans. purge. 
ETC.) 

1 

GROSS RUPTURE 

1.00E-07 

1.00E-U9 

POSS 

72 

PuRGE SYSTEM 

CENTAUR SOLENOID OPERATEO 
VALVE (TO PRESSURE TRANS. 
PURGE. ETC.) 

2 

RUPTURE OR LEAKAGE 

2.00E-07 

2.00E-09 

ACT 

73 

purge system 

CENTAUR SOLENOID CONTROLLED 
SELF REGULATING VALVE (10 
LO r vENT STAND-PIPE) 

1 

GROSS RUPTuRE 

1.00E-07 

I.OOE-J9 

POSS 

74 

purge system 

LH, TANK. INSULATION PURGE 
VERT, 4P TRANSDUCERS 

3 

GROSS RUPTURE 

l.OOE-OS 
1 .OuE-06 

POSS 

73 

P-RGE SYSTEM 

LH, TANK, INSULATION PURGE 
VERT. RELIEF VALVES 

2 

GROSS RUPTURE 

1.00E-07 

l.uui-09 

P— j 3 

76' 

purge system 

LH, TANK, INSULATION PURGE 
VERT, LINES 4 FITTINGS 

1 SET 

GROSS RUPTURE 

l.OOE-UA 

1.0UE-07 

PCSs' 

77 

VENT SYSTEMS 12 

LH. TANK self regulating 
VERT VALVE 

1 

RUPTURE OR LEAKAGE 

2.0UE-07 

2.U0E-09 

AC’ 

7o 

VENT SYSTEMS 

LH, PNEUMATIC OPEN. SPRING- 
LOAD CLOSCO. BAll VAlVE 

l 

RUPTURE OR LEAKAGE 

2.00E-07 

2.0UE-U9 

ACT 

79 

VENT SYSTEMS 

LINES A FITTINGS (BETWEEN 
LH, TANK 4 MECHANICAL VENT 
VAtvESI 

1 SET 

RUPTuRE OR LEAKAGE 

5.00E-05 

S.OuE-Jo 

ACT 

6J 

VENT SYSTEMS 

LH, TANK THROTTLING REGU- 
LATORS 

2 

RUPTuRE OR LEAKAGE 

2.00E-07 

2.U0E-U9 

ACT 

61 

VENT SYSTEMS 

lh, tank thermo vent system 
shotoff VAlyES 

2 

RUPTJRE OR LEAKAGE 

2.00E-07 

2.00E-09 

AC* 

87 

VENT SYSTEMS 

LINES 4 FITTINGS (BETWEEN 
LH, TANK HI 4 VALVES) 

3 SETS 

RUPTURE OR LEAKAGE 

5.00C-05 

5.00E-U6 

ACT 

63 

VENT systems 

LH. TANK 3-WAY PNEUMATIC 
VAlYES 

2 

RUPTURE OR LEAKAGE 

2.00E-07 

2.00E-U9 

AC* 

64 

VENT SYSTEMS 13 

LINES 4 FITTINGS (BETWEEN 

lh, vent valves ' cisconnecti 

1 SET 

RUPTURE OR LEAKAGE 

S.OOE-OS 

S.DUE-U6 

poss • , 

86 

VENT SYSTEMS 

LM, tank HEAT EACHANGER 

1 

failure or HA TANK hCUNiUG 

3.00E-08 

3.00E-1I 

PSCs 

66 

VENT SYSTEMS 

lm, tam electrically driven 
pump 

1 

FAILURE of PUMP OR motor 
TANK mountings 

3.00E-08 

3.Q0E-U 

PRu6 

8? 

VENT SYSTEMS 

LH, TANK VENT OISCONHECT 

1 

rupture or leakage 

2.00E-07 

2.00E-09 

PuSS 


Table A-l. Centaur Failure Modes Contributing To STS/Centaur Behavior Modes - 
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FAltgKl UTt 


NO. 

ItNlCll MO Sw4- 
suun 

inn 

NO. 

inns 

FAlluAt NOOt 

V k . 

Vt IG nT 1NG 
FACTOK 

M 

«NT i»$T(HS 

so. tana juf msuiating hint 
IKU 

i 

SO»Tl*l 0* ItASAGt 

t.OOt-OT 
J. 001-09 

ACT 

49 

«nt sunns 

10. TANA FNf'JMATIC OFti. 
SMUG-lOAO CkOStO, MU 
isiit 

1 

KOFTuKt OK USA ACt 

t.OOt-OT 
I. 001 -09 

ACT 

90 

»tnT sunns 

lints t FITTINGS (ItTNttn 

10, TAW 4 NtCNMICAl ItNT 
VAlllS) 

t SIT 

KuFTjKt OK ItASAGt 

K.OOt-OS 

S.OOt-OT 

ACT 

91 

•InT sunns 

10. TAW tUCTKiCAUT Mills 

l 

FAtiUKt OF FJNF OK MJTvK TANA 

MOUNTING 

K.00t-08 

A.OOt-U 

FAu« 

u 

irtsT sunns 

I*. TANA «NT STSnn CISi 
nascoFiHG list 

l 

KuFTuAt OK ItASAGt 

l.OOt-OS 

l.00t-04 

FOSS 

91 

UM sunns 

in. rsns itNT srsnn OMirtK 
DOT lusntso FUUHt 114. 

1 

AUF'uAt OK ItASAGt 

t.OOt-OS 
2.001 -ON 

FOSs 

»« 

vCnt sunns 

m. tsus %tNT sunn osftim 
niS-ioot FitClit list 

l 

KuFTuKt OK ItASAGt 

t.OOt-OS 

t.OOt-Oa 

FOSS 

95 

•CUT sunns 

in. TANS VINT sunn 0AJ1TIK 
iso? lusNiu oiscMNtci 

l 

AjFTuKt OK ItASAGt 

t.OOt-OT 
t. 001-09 

FOSs 

96 

itNT sunns 

IN, TAM ItNT sunn OSlin* 
niS-ioot oisconnict 

l 

KuFTuAt OK ItASAGt 

t.OOt-OT 

t.OOt-09 

FOSS 

»■> 

itNT s»snns 

in. tans «nT sunn C1SS 
FutunATl: SHUTOFF IAU IAl»tS 

A 

AjFTUAl OK ItAiAGt 

t.OOt-OT 

t.0Ot-09 

►OSS 

9» 

its* sunns 

lints * FITTINGS lltnttn 
ih. «tnT sunn cisi i sms 

A Full OlSCONNtCt »ANtl Full. 

list 

l SETS 

KU*Tu«t 0* ItASAGt 

S.OOt-JS 
S. 001-04 

»OSs 

99 

.-St sunns 

lists i fittings latum 

CISS IN. SHuTOFF v AiiIS * 
1 JjT JutsulAD Full, lilt 

l StT 

Ku»Tu»t QK ItUAGt 

S.uJt-OS 
5. OOt -Go 

FvS> 

4W» 

UM SUnns 

lilts A F1TTUGS (JCTiltn 
CISS IN, SnuTJFF i AutS A 
0A91TIA N13-600I ItNT ) 

l StT 

KiFT.Kt OK ItAlAGt 

S.DOt-OS 

5.0QI-0© 

FOSS 

u: 

•'in 

STSU*'*'* 5 

■ t N{ TANK.PTRJ SNlJOFFISlItS 

. . 1 

KuFTuAt OK ItSAArf 

1.001-3’ 
l ,00t-0» 

a;* 


FI.. OUli OA.nf 
S uUn 

lilts A FITTINGS (Btr.tti 
l«, Tllw AN 0 AtAj ShuTOFF 
lltllSI 

1 StT 

KuFTuAt OK ItSAlGi 

T.OOt-OS 

T.OOt-uo 

AO* 

UJ 

nu main om# 
sunn 

ih, tana ouna Hit Quits- 
d:s:onu;t 

1 

KQFTuU OK ItASAGt 

I.COt-OT 
1 .00t-u9 

a;* 

u< 

mu sum sun? 
SnUn 

iCj tana mao Shutoff 1 AiltS 

t 

KuFTuAt OK UAAASi 

l.OOt-OT 

l.Ott-09 

A1 * 

US 

i;.i 1M1I Sunn 
SUUn 

iiits t fittings otmiN 

10, TAM AND mao ShuTUFT 
IA.lt ) 

l StT 

KuFTuAt OK ItUAGt 

T.OOt-OS 

T.OOt-uO 

AO* 

lull 

r;.i main Sj» 
sunn 

10, Tana Duma UNt QolCs- 
OlSCOINtCT 

l 

AuFTUKt CK UA*A„t 

l.OOt-OT 
1. Out -09 

a;t ' 

U- 

iiiTi*«iM»n i*i- 
"ISO AtlltF SUUN 

FAtSSUAl TAAiSOuCtAS 

J 

AuFTuKt OA llAAAGi 

t.OOC-uS 
2 .0Ot-OA 

a;t 

Iuh 

s»ns»is:»u koh- 
HfAO AUllf sunn 

CHttA lAlltS 

l 

Au»Tu*t OA itAAAGt. 

i.OOf-O’ 
l. Ol't-09 

a;t 

109 

i*n«ns3:»n mu- 
nlAJ Si. Ill sunn 

DISiOniilT IAT AFT full 
P All i 1 

l 

AuFT.Bt OK it AAAGt 

t.OOt-0* 
1 .001 -u9 

sot . 


■GK»r» G.*' jf . . ‘n'il'iV r*H -—'I '-’f ' -» 





Tibi* A-l. Centaur Failure Modes Contributing To STS/Centaur 
Categories 6, 10 and 11(a) (Page 6 of 8) 


Behavior Modes - 


1 


i 


NO, 

VEHICLE AND SUB- 
StSUN 

item 

NO. 

1UNS 

FAILURE nooe 

failure rate 
V k R 

nE IGnTInG 
factor 

110 

InURMEOIATE BUU- 
HUO RELIEF SI SUH 

OR IF ACE (FROM Olll TEt GN, 
force i * 

s 

IJFTuRER 01 LEAR AGE 

2.UOE-QT 

I.OOE-Ut 

ACT 

111 

1NUWOUU »ULF- 

muj tester sts T in 

CISS FlCIIILC lines 

t 

RUPTURE on lea* age 

2.QQE-US 

2.0OE-0N 

ACT 

no 

intermediate euu- 
meao relief st sun 

ciss vent 

1 

NURTURE OR LEAFAGE 

2.001-0T 

E.OuE-09 

ACT 

1U 

INTERMEDIATE BULF- 
HlAD RELIEF STSTen 

LUCS 4 riTTlNOS (BETWEEN 
CAtITt B DISCONNECT) 

1 SET 

RuPTuRE OR LEAFAGE 

I.OOE-04 

2.001-07 

ACT 

u« 

INTERMEDIATE BuU- 
NEAD RElICF STSUn 

LINES B FITTINGS (IN CISS) 

1 SET 

RUPTURE OR LEAFAGE 

S.OOE-OS 

S.OOE-On 

ACT 

us 

INTERMEDIATE BulF- 

hefd relief ststem 

CnCCf TALVCS 

l 

lAOCFAGC 

2.00E-07 

2.00E-U9 

ACT 

lib 

ciss nciiun supply 14 

NELllFT I TUES 

to 

GAOSS RjFTuRC 

l.OOE-7 

l.OUC-9 

PROS 

117 

Ciss nE.iun soffit 

CISS, Oil. Ul DISCONNECT 

1 

GROSS RuFTuRE 

l.OOt-07 

1.00E-U9 

PAOB 

lid 

CISS nEUJT SUPPLY 

flerible ;ne 

l 

GROSS RuPTuRE 

l.OOt-OS 

1.ME-U6 

PROS 

119 

CISS HtUlFT SOFFLT 

FIlOT ofciatco solenoid 

TALTt 

B 

GROSS RUPTURE 

l.OOt-OT 

1.00E-U9 

PRuB 

WO 

CISS NELllW SOFFIT 

CNECA TALVES 

1 

GROSS RuPTuAE 

l.OOE-0’ 

1.00E-09 

PRu» 

W1 

CISS nElIi* SUPPLY 

LINES B FITTINGS 

1 SET 

GROSS RUPTURE 

nooe -os 

2. OOE-u? 

PROS 

WO 

CENTFuA HELIUM 
SuPSd 

filter 

1 

GROSS RUPTURE 

l.OOE-OS 

l.OOE-Ud 

PR. a- - 

WJ 

CEnTAjR nClIum 
S.PP.T 

CNECA TALUS 

B 

GROSS RuPTuRE 

1.UOE-OT 

l.OuC-Oy 

PS u» 

104 

CEN'FjR hIlIuM 
SmFFvT 

LINES A FITTINGS (BETWEEN 
CtNTAwR 'CISS DISCONNECT B 
REGolaTORI 

l SET 

CROSS RUPTURE 

2 .001-04 
2.OUE-07 

P«.L 

US 

ClRnuA hElIjm 
S.SPlY 

RESSuRE REGULATOR 

X 

GROSS RuPTuRE 

1.001-0'’ 

l.OOE-09 

PR.t 

106 

ClN’FuR wtLlOM 
S.PP.t 

RELIEF VAlTES 

X 

GROSS RUPTURE 

1 .001-07 
1.00E-U9 

PR.e 

W? 

CEnHd# hElIjm 

SvPPi-T 

HELIUM BOTTLES 

t 

RuPTuRE 4 fragment PrdPACA- 
TIOn 

100E-7 

l.OOE-9 

PRO# 

Wd 

CEN’AjR WEUOH 

Sups.* 

LINES 4 FITTINGS (BETWEEN 
REGULATOR t 1ST PTRC »Jk»CS 
of N,N. B ENGINE CONTROLS 
STSTtnS) 

X SET 

GROSS RUPTURE 

1 .001-04 
l.OOE-O’ 

POsS 

109 

reaction control 
S' STEM* 

NTDRAIINE (N,M.) SUPPLY TANA 
(FOEl SIDE) 

1 

RuPluRC OR LEAFAGE 

2 .OOE-u’ 
2.UUE-09 

»Sui 

1JJ 

REACTION CONTROL 
SYSTEM 

NTORAIINE SUPPLY TAM. (Cn» 
SIDE ABOTE LINER) 

1 

GROSS RUPTURE 

1.0OE-J? 

I.O0E-U9 

PR.B 

in 

reaction control 
Stsuh 

N,N. TAN* isolation FTRO 
TALUS (ON UPSTSEM TAW 
PRESSuRWATIOn SIDE) 

1 

gross rupture 

l. OOE-U’ 
l.UvE-uB 

PUSS 

110 

REACTION control 
System 

N.N. TAN* ISOLATION PTRO 
TRlTES LO« DOWNSTREAM N.M* 
Slid 

* 

t 

Rupture or lEaaage 

2.0OE-0’ 

2.00E-U4 

PR.: 9 


i 
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Tibi# A-l. Centaur Fillur# Modes Contributing To STS/Centaur Behavior Modes - 
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UlLURt RATt 


•0. 

TtHlCLt RAO SUI- 
ST STM 

m* 

NO. 

SUNS 

FAILURE M»t 

V 

NtlGxTlN* 
RAC TOR 

Ill 

RUCTION control 
STSUA 

UNC ION URSTRtM On SIDE 
or IRANI 

t UT 

GROSS AuRTuRt (LIME MTVtCN 
N.H. TANA RAO ISOLATION RTRQ 
TRLTtS 

S.OOC-OS 

s.uoc-ub 

ROSS 

IM 

AC ACT ION CONTROL 
STSTtN 

LINE TON OOnnSTAIM «,n. 

Slots 

1 UT 

RURTURt OR LIRA AGE UINC 
41 TV UN NjN 4 TRAN RAO ISO- 

lrtioa rtIo TRlTISI 

S.OOC-OS 

S.OOl-UB 

RRuS 

us 

RUCTION CONTROL 
$>iUH 

rtLL 4 TINT TRltC ION UR- 

strcra gh* slot or trnnI 

t 

MOSS RURTuAt 

I.OOt-OT 

l.0ot-U9 

ROSS 

u» 

RCRCUON control 

STJTCN 

r III i orrin trite (On oonn- 
STRtRN Slot or Nj* 4 IRK) 

1 

RURToRt OR LlRRR U 

I.OOt-O? 
1 . out-os 

RRUS 

ii? 

RUCTION CONTROL 

ststcn 

RRtSSORt TRANSOUCtRS ION 
rutL slot or TRnn I 

i 

RURTURt OR LlARAtf AT TANA 
PITTING 

l.OOC-OS 
1. Out-Os 

RRUS 

IM 

HTORRulIC STSUN 1 * 

RAtSSUAC 1 RtToRN LtNtS t tH> 
CluOInG JOINTS 4 FITTINGS) 

I SITS 

MOSS Ru»TuRl (RRtSSURt LlNl 
- 1U0 RSI NHtN IN SNuTlLt) 

I.OOt-UR 

2.001-07 

ROSS 

»* 

MYOAAULlC SVSTtR 

SERtO TALYt 

4 

MOSS RURTURt 

I. OOt -07 

t.oot-ot 

RosS 

i*o 

HTDRAuUC StSTtN 

•UAlfOLO RSStNlLT 

l 

MOSS RURTURt 

l.00t-07 

1 . 001-09 

ROSS 

h; 

ntORROlIC StSTtN 

CNGINt OR 1 TIN RUM 

t 

CRU RURTURt 

1. OOt -07 
1.00E-U9 

ROSS 

;« 

hiDRRulIC StSTtN 

RICIRCulRTION RlP* 

1 

CRU RURTURt 

l.OOt-07 

i.OOt-09 

RCss 

;*i 

"TOAAULlC STSUN 

RtLttr talus 

4 

MOSS RURTURt 

1 .001-07 

l. oot -o» 

ROSS 

h« 

titOAAULlC STSUN 

CNICR TRLTtS 

4 

GROSS RURTURt 

l.00t-07 

i.oot-o» 

RUss 

US 

NtOSAu.lC STSTtN 

PRESSURE TRRnSOJCER 

1 

MOSS Ru»TuAE AT TITTING 

1 . out -os 

1 .Out-Os 

R.Ss 

H» 

•HORRulIC sutin 

UKRlAATuRC TRRMSOOCCR 

t 

MOSS RURTURt AT FITTING 

1 . oot -05 
1. out -os 

ROss 

;*'• 

■ NTD4ru 1C StsUN 

' DISCORNtCTS' 


MOSS RURTURt 

l.OOt-07 

1.001-U9 

' ROss 

H* 

Rnunayi; vnlti. 
COMROl STSUN 1 ’ 

OtnOTNtNT RBR»UR lInIS t 
riTTINCS TO R«U»U!K ACT1- 
TRTtO TRLTtS 

2 SITS 

GROSS RURTURt IT RON SOitNOlO 
TRLTtS TO TlUHU LINO 

I. 00t-05 

J. OOI-0B 

R.sS 

1*1 

RnIJNRTIC VALVE 
CONTROL STSUN 

OCRlOTNCNT RORRTfR SA.CNOIO 
VRLTt t to rniohru; rcti- 
TRUO TRLTISI 

1 

MOSS RURTURt 

l.OOt-07 

l.OUt-09 

ROSs 

iSu 

RNtuHATlC VRLVt 
CONTSOi STSUN 

OmOUTtAT ADARUR FLtlltU 
LINES (TO RNlUNAUC Rill- 
TRTtO TRLTtS! 

t 

MOSS RURTuRt 

I.00C-U5 

1 . oot -us 

ROss 

1SI 

►NlUNATK TN1TC 

control StSUn 

DHlQTNtNT RORRTU CtNTROR 
RNtvSLRTlC TRLTl ACTUATION 
OlSCONNlC T 

1 

MOSS RURTURt 

l.OOt-07 

1.0CI-U9 

' ROSS 

IS2 

RnCjnrTIC VAiH 
CONTROL STSUN 

CtNTRUR CHtCN TRlTSS (to 
RN tUNATIC RCTITRTLO TRLTtS! 

4 

MOSS R UR TORE 

t.ooc-o? 

l.0Jt-09 

Russ 

isi 

RNtJNATK TAUt 

control STS11N 

LUtS 4 TIMINGS IOOnnSTRIAN 
or REGULATORS 1« CISS TO 
riLL/OJM 4 TINT .RiUSl 

4 UTS 

MOSS RURTuRt 

l.CKTl-U* 
1 .00t-07 

R-ss 

IU 

ntJHATIC TAlTt 
CONTROL STSTtN 

CISS 1-NRT SOLtNCII! TRiTt 

actuators 

20 

MOSS RURTuRt 

l.OOt-07 
V. 0ut-09 

RUSs- 

m 

RNI.WAT1C TRiTC 
CONTROL STSTIN 

CISS SOLtNOlO CROSS CON- 
VICTION TRLTtS 

) 

MOSS AURTURC 

1 .OOt -07 
1 ,001-09 

ROS> 


Table A-l. Centaur Failure Nodes Contributing To STS/Centaur Behavior Nodes - 
Categories 6, 10 and 11(a) (Page 8 of 8) 


*0. 

vtmai mo su»- 

SUUK 

in* 

NO. 

UINS 

UliuAt MOOS 

fRinm. RATI 

V‘. 

Nl IttHtlNu 

rwto* 

IS# 

TUTl 

cont*,x inHH 

CISS MISSUAt TAAnSOoCUS 

u 

CROSS turTuAt 

l. out -OS 
l .001 -ON 

ross 

IV 

mi^nc **m 
sONTHOo S»SUN 

ciniaua soimoio caoss con- 
MICTION »AlUS 

1 

MOSS AUTTuAt 

1. 001 - of 

1. 001- 09 

ross 

ISA 

rNIJNATIC VWVl 

contaoi s*sun 

UNIS 1 F1MIH4S (TO TINT I 
Ou**> TAiHS IN CtNlAoAl 

1 UTS 

MOSS AuPTutt 

1. 001- 04 

1.001- O) 

. ross 

IS9 

mi »v.»i 

COnUOi S»SUN 

CtNTAUA J-NAT SOltNCiJ mil 
ACTu ATOAS 

10 

MOSS AOPTuAt 

1.001 -0? 
1. 001-09 

ross 

l»c 

Ni.««u; twvi 

CONliOl S’SUN 

CtNTAUA IN. Urn TINT tu»c 
J-nA( SOllROlO ACTuATOAS 

1 

inaouaunt on*vioN JJ 

J.oot-os 

J.ooi-u* 

Alt 

l»l 

*ni.««at:c valvc 
cow*.*. stsUn 

CtNTAuA (.0, TUN TINT TAlH 
J-NAT SOltlOlO ACTgATOA 

» 

InAOUAUnT opiaatiqn* 0 

J. 001 -OS 
J. 001 -UN 

AU 

>».* 

CIUWA STIoCTuttS* 1 

CONICAl SrACCCAAM WATTtA 

l 

STRoCTuAAl COllAPSl” 
SNgTTvt t 10ACSI 

J.OOl-OS 

J.uot-u 

ross 

ItJ 

;ww shovToais 

toanaad oiimi cintaoa 

SuPPOAT STAuCWAl UNiiuOlNO 
TAUNIONSI 

i 

couapsi or sue ui o* mi 

(11 STRuCTuRl* 4 (SnuUU g 
IOA0SI 

J .001 -Os 
J.OOl-U 

TAOS 

io* 

C«.*r» v « iTR^cTuRts 

FOS.AAO OAAIUA CINTAoA 

J 

COilAPSl Of fOA.AAO Silt 
IAT(J« (0) r OK. 1*0 Nile IATCH 

ui* J vSNuna g towsi 

J.uoC-Oo 

J.OUt-li 

Ptiof 

i*S 

CIuHjS STA.CTuttS 

CIN'AOA SuPAOAT STAuCTuAl 

urn ii*ujc;Ni taunions) 

l UNIT 

STRoCTuAAl. COllAPSt* 4 
ISmuTTiI g 10WS) 

J.OOl-O* 

J.OOl-U 

P*vJ 

;o« 

cintaj* 

CINHjK SUPPOAT S’AuCTuAt 
(ATT) *TT*£-*nnTS 

S 

STAuCTuAAi COvU»St‘* 
(SNvTT.l g tOWSI 

J.Ool-Jo 

J.Ool-ll 

*'A.S 

»*' 

a»’u staoctjais 

CUlNORICAi STuI AOAPTU 

l 

st5.<t.,«ni, ccuapsi-’ 3 

(SNvTTit g lows) 

1. 001 - 09 

1.001- n 

Pi .-A 

it? 

STAuCT.Ati 

ATT AOAPTU 

l 

STRXToRA. CO.lAPSt* 4 
(SnoHu g lOWS) 

J.oot-os 

j.oot-n 

Pi... 

i»o 

CtN'A.A STAuCT.SlS 

dii'.c'tnint »own» UWlUO- 
1NU TAyNlONS) 

l UNIT 

STAuCT.SAi COUAPSl* 4 
(SN.TT.i g tows) 

J.OOt-OS 

J.OOl-U 

fN," 

ro 

UNTA.A >TS«>C!oRlS 

.aota-uon mcnm>:s» s^poai 

S t A u. T oil (In. . .0 . Nu i( 1 1 
PIN) 

. i. iv.t 

STRjCT.AAi C0u»rsi i4 
(SN.Uvt g lOWSl 

J .001 -Os 

J.OOt-ll 

Pi. i • 


rrig an ^ i l^-Tr^ t ^nr i i rnwMfihjr»hiw sirVUTl it 
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Table A-2. Centaur Failure Modes Contributing to STS/Centaur Behavior Mode 
Category 11(b) of Table 3-4 (Page 1 of 6) 



VEHICLE MO SUB- 


NO. 


FAILURE RATE 

MEIGmTIn* 

NO. 

SYSTEM 

ITEM 

ITEMS 

FAILURE MODE 


FACTOR 

1 

TAm STRUCTURE 

LO f tam apt rings NELOS 

4 

MELD RUPTURE 

1. 001- 07 

1.001- 1Q 

ACT 

2 

TAM STRUCTURE 

CYLINDRICAL LOj TAM MELOS 

* 

HELD RUPTURE 

I.00E-Q7 

1.00E-IU 

ACT 

1 

tank structure 

DOUBLE mailed intermediate 
iulaneao needs 

24 

MELD RUPTURE 

1.00E-07 
1. 001-10 

ACT 

4 

TAM STRUCTURE 

ATT BULAHEAO MELOS 

• 

MELD RUPTURE 

1 .001-07 
1. DOE-10 

4ET 

S 

TAM STRUCTURE 

LOj TAM ENGINE PEED PITTING 

1 

RUPTURE OP PITTING OR AT 
TAM TO PITTING MELD 

1.00E-05 

1.00E-08 

4ET 

6 

PROPULSION system* 

10, PEED OUCT 1 (FREW 7AM TO 
LOj pre-yalyei 

I SET 

RUPTURE OR GROSS LEAKAGE 

2 .001- 04 

1 .001- 07 

ACT 

7 

propulsion system 

LOj peed DUCT PRC-YALYE 

1 

RUPTURE OR GROSS LEAKAGE 

2.00C-U7 
2 .001-09 

ACT 

8 

tam pressurization 

SYSTEM* 

fumble LINE I8ETMEEN CISS 

1 DEPLOYMENT ADAPTER) 

1 

GROSS RUPTURE 

2.00E-JS 

2.001-08 

PA«8 

9 

TAM PRESSURIZATION 
SYSTEM 

LINES S FITTINGS 14000 PS! 
SECTION UP TO ORiPACE IN OE- 
PlOTMEnT ADAPTER) 

1 SET 

GROSS RUPTURE 

2.00E-04 

2.00E-O7 

PROB 

10 

TAM PRESSURIZATION 
S» STEM 

MANUAL ShuTOPP valve UN 01* 
PLOYNENT ADAPTER) 

2 

GROSS RUPTURE 

l.OOC-o? 
1 .001-09 

PRO* 

11 

7AM PRESSURIZATION 
SYSTEM 

DEPLOYMENT ADAPTER FILTER 

1 

GROSS RUPTURE 

l.OOE-OS 

l.UOE-Oo 

PROi 

12 

TAM PRESSURIZATION 
SYSTEM 

PILOT OPERATED SOLtNOIO YAlyE 
(IN DEPLOYMENT aoapuri 

20 

GROSS RUPTURE 

1.00E-07 

1.00E-U9 

PRO 1 

U 

TANA PRESSURIZATION 
SYSTEM 

ORIPACE UN DEPLOYMENT 
ADAPTER) 

6 

GROSS RUPTURE 

1 .001- 07 

1 .001- 09 

PR. c 

U 

TAM PRESSURIZATION 
SYSTEM 

LINES A FITTINGS (BETWEEN 
ORIFACES 4 01SC0NNECT PANELS 
<» 4000 PSD 

1 SET 

GROSS RUPTURE 

s.ol'E-us 

S.U0E-J8 

p;s> 

IS 

TANA PRESSURIZATION 

System 

FlEAISlE LINE (BETWEEN CENT- 
AUR 4 OEPlOTMEaT ADAPTER) 

) 

GROSS RuPTuRE 

l.OOE-OS 

1.001-08 

P.AA 

J6. . 

tana- PRESSURIZATION 
SYSTEM 

. OAIJIZER 4- fOtL DISCONNECTS 

1 • 

GROSS RuPTuRE 

l.OOE-C' 

1.00E-J9 

P--» 

17 

Tana PRESSURIZATION 

system 

CnECa VALYt (lO, TANA SIDE IN 
CENTAuRI 

l 

RuPTuRE OR GROSS LEAKAGE 4 

2.00E-H’ 

2.O0E-U9 

ACT 

la 

tana PRESSURIZATION 
System 

CkECA YAlYES (PuRTnEST prom 
LOj 4 LMj TANKS) 

2 

GROSS RUPTURE 

1.00E-J7 
1 .001-09 

PJSY 

19 

tana PRESSURIZATION 
system 

OR 1 PACES UN CENTAUR LO, 
TANA SIDE) 

2 

RUPTURE OR GROSS LERA AGE 4 

2.00E-U* 
2. ODE -09 

ACT 

20 

tana pressurization 
system 

pilot operated solenoid yalyE 

(lO, tam sloe NEAREST ORI- 
FACtl 

2 

RuPTuRE OR GROSS LEAKAGE 4 

2.00E-J' 

2.00E-U9 

AO’ 

21 

tana pressurization 

SYSTEM 

LINES 4 riTTlNGS (PROM 10, 
TAm TO 1ST SOLENOID YAlyC 
4 1ST CHECA YALYE) 

1 SET 

RUPTURE OR GROSS LEAKAGE 4 

2.0OE-O4 

2.001-07 

A.T 

22 

tana pressurization 
system 

PILOT OPERATED SOLENOID 
VAUES i TWO YAktES 0* £A» 

tam side furthest prom oai- 
FACESI 

4 

GROSS RuPTuRE 

1.0VE-07 
1 .001-09 


21 

tam pressurization 
system 

LO, Tam PRESSURE transducers 
4 FITTINGS 

S 

RUPTURE OR GROSS LEAAAGE 4 

2.0OE-0S 
2.001 -US 



Table A-2 


Centaur Failure Modes Contributing to STS/Centaur Behavior Mode 
Category 11(b) of Table 3-4 (Page 2 of 6) 


FAILURE Utt 


NO. 

VENtCCt MO SU«* 
ST STEM 

m* 

NO. 

items 

FAILURE mode 

VS 

NEIOnTINL 

FACTOR 

24 

CtSS FRESSUAC RELO- 
CATION STSTEN*'® 

CtSS HMuAc SNUTOPP VALVES 

i 

LAO Si RUPTURE 

l.OOt-O? 

1.00E-09 

PROS 

2S 

Cl S3 PRESSURE RELO- 
CATION StSUN 

CtSS PIcTER 

i 

laoss Rupture 

l.OOE-OS 

t.OOE-ON 

PROR 

it 

CtSS PRESSuAE AELo- 
CATION STSTEN 

CtSS OIScOKNECT 

i 

6R0SS RUPTURE 

1. Out -07 
1 .OOE-U9 

PRO# 

r 

CtSS PRESSuAE AELU- 
L4It ON STSTEN 

CtSS C IRES 4 PITT1NLS (UP- 
STREAM OP RELUCATORSI 

1 SET 

LROSS RUPTURE (IETVCEN RELO- 
CATOS 4 1ST SOCENOIO VAcvl) 

S.00E-04 

I.UOE-0) 

PROS 

4 0 

Cl 3S PRESSuAE REGU- 
LATION STSTEN 

CtSS S0CCN01S OPERATE!) VAcTES 
(UPSTREAM OP ALLOCATORS) 

1 

LROSS RUPTURE (VALVES NEAAEST 
TO ALLOCATORS) 

l.OOE-O? 

1.00E-04 

PRUI 

it 

CtSS PRESSURE RELO- 
CATION ststen 

CtSS CNECA VALVE - 

4 

LROSS RUPTURE 

l.OOE-O? 

l.OuL-09 

POSS 

in 

C1SS PRESSURE RELO- 
CATION St $ TEN 

CtSS PRESSURE TRANSDUCERS i 
rmtNLs 

3 

LROSS RUPTURE 

l.OOE-OS 

l.OOE-oa 

POSS 

it 

C1SS PRESS.RE RELO- 
CATION ststen 

CtSS RELocATORS 

3 

LROSS Picture 

l.OOE-O) 

1.00E-09 

PR03 

32 

C1SS PRESSURE RELO- 
CATION StSTCH 

CtSS LINES A PtTTtNLS (BONN- 
STREAM OP RELocATORS) 

t SET 

LROSS RUPTURE (FROM RCLUCRTOR 
TO CAST SET OP PARALLEL 
VALVES) 

2. OOt -04 
2.00E-07 

POSS 

ii 

CtSS PRESSURE RELO- 
CATION STSTEN 

CtSS SOCENOIO OPERATEO VACTES 
(OOnnSTREAM OP RELoCATORSI 

2 

LROSS AoPTuAE (VAcVtS NEAR- 
EST TO RELocATORS) 

l.OOE-0’ 

I.U0E-09 

POSS 

34 

CtSS PRESSURE RELO- 
CATION S*ST£N 

ClSSOCPcOTNENt AOAPTER 
PcEAIBcE LINE 

t 

LROSS RUPTURE 

I.OOt-OS 

1.00E-J8 

POSS 

35 

CtSS PRESSURE RELO- 
CATION stSTcN 

CtSS SOcENCIO .VAcVtS (UP- 
STREAM OP RiLuCATORS) 

3 

LROSS RUPTURE (VALVES 
PuRTulcT FROM RELOCATORS) 

l-OOE-O" 

t.0oE-09 

PROd 

id 

CtSS PRESSURE RELO- 
CATION S'STEN 

CtSS SOcEnO.'D VALVES (OOnN- 
STREAN op RELOCATORS) 

3 

LROSS RoPToRI IVAEVES 
FuA Tt-EST PAW RELocATORS) 

l.OOE-O’ 

l.OOE-JV 

P-uSS 

J) 

CtSS PRESSURE RELO- 
CATION STSTEN 

CtSS LINES A PtTTtNLS (UP- 
STREAM CP RELOCATORS) 

1 SET 

LROSS RoPToSE ITROM nt SUPPCt 
TO 1ST SET OP PARALLEL 
VALVES) 

1 .001-04 
l.OOE-O) 

P-wP 

)d 

CtSS PRESSuRE RELo- 
. CATION STSTEN.- • _ ' 

CtSS LINES 4 PtTTtNLS (OCuK- 
- STREAM- OP RE LOCATORS') . . 

1 SET 

LROSS RuPTuRt (PROM CAST SET 
OF PARALLEL VAcVtS TO CtSS' 
OEPlOTNiNT ADAPTER fltUBct 
CINE) 

1.00E-04 

l.UuE-o’ 

P.'SJ 

39 

PoRLE STSTEN* 

nt PORLE ORES TO 28 vac 
REC1AC. POMP MOTORS 

2 SETS 

RUPTURE or CtAcALt 1 LOSS op 
motor PuRle 10 (cine from dsi- 
face in pneumatic ststen to 

MOTOR) 

2.00E-04 

2.00E-U) 

p.ss 

40 

PuAuE STSTEN 

CESS PCECIRCE LINES 

2 

LAOSS RuPTuRt 

t. OOt -OS 
l.oul-ud 

P.S> 

41 

PoRLE STSTEN 

OCPcOTHENT adapter SOcEnOIO 
TAuVES 

IS 

LROSS RoPToRS (1ST SET OP 
PARA-ilc VAiKS TO JkSocA- 

tion a enliue purges 4 c. 

TALUS TO tOj/CH. F ICC- OcAlN.' 
VENT) 

t. out -o’ 

I.00E-09 

PC >S 

42 

PoRLE STSTEN 

depcotncnt adapter lines i 

PITTInLs IIETNEEN CtSS SE- 
PcOtnlnt edaptcr raufcl 
LINE 4 1ST SOCENOIO VACTES) 

1 SET 

LROSS RuPTuRt 

S. Out -OS 
S. 001-00 

POSS 

43 

PoRLE STSTEN 

OEPcOtnEnT adapter LtNCS 4 
PiTTlNLS (CONNECTING SOLE- 

t SET 

LROSS RuPTuRE 

4. OOt -04 
4.0JE-0O 

POSS 


NOtO VALVES, 0PIF4.ES. CnECA 
TAcvE S US. I 






-.Table ft- 2. Centaur Failure Modes Contributing to STS/Centaur Behavior Mode 
Category 11(b) of Table 3-4 (Page 3 of 6) 

failure un 


. 

KfKlClC A*>_*(i£ 

ITEM 

NO. 

ITEMS 

FAILURE nooe 

V‘. 

MCIGhTIn. 

factor 


■ ' . ' ; ' . > _ 

- ---* _-*ac' 

DEPLOYMENT adapter lines a 
FITTINGS IICTSltN DRIP ACES « 

pleiule line to taml i*- 

SULAT10NI 

1 SET 

GROSS RUPTURE 

t.QOE-04 

l.OuE-04 

POSS 


^^¥T»ritiTCH 

DEPLOYMENT adapter lines a 
FITTINGS IAEMEN ORIFACCS A 
ENGINE PURUS) 

1 SET 

GROSS RUPTURE 

1.00E-04 

1.0UE-U4 

POSS 

46 

. VSut SYSTEM 

DEPLOYMENT ADAPTER PlEIIALE 
LINE (TO ENGINE PURGE) 

1 

GROSS RUPTURE 

Z.OOE-OS 

1.00E-04 

POSS 

*;■ 

PuRGE STSTEM 

DEPLOYMENT ADAPTER FlE*I8L£ 
LINE (TO TANA INSULATION) 

1 

GROSS RUPTURE 

l.OOE-OS 

l.OOE-Od 

POSS 

46 

PURGE SYSTEM 

deployment adapter tana in- 
sulation DISCONNECT 

1 

GROSS RUPTURE 

l.OOE-OT 

I.U0E-09 

POSS 

49 

PwROE SYSTEM 

CENTAUR LINES A FITTINGS ITO 
LO, tana pressurization line, 

LOt VENT STAND PIPE, LO, 

TAna PRESSURE transducers 
ETC.) 

1 SET 

RUPTURE OR LEARAU 11 

4.00E-DA 

4.0UE-UT 

ACT 

50 

PvRuE SYSTEM 

CENTAUR OR1PACES (TO LO- TANA 
PRESSURE TRANSDUCERS. tYC.) 

4 

RUPTuRE OR LEAAAGE 

2.0UE-D? 

2.UUE-U9 

a:y 


"..(GE SYSTEM 

CENTAUR ORIPACE IIETNEEN PYRO 
valve a insulation purge 

LINE) 

1 

GROSS RUPTURE 

J.OOE-OT 

I.UUE-U9 

Puis 

52 

PuRiE SYSTEM 

CENTAUR ORIPACE ITO MVORAU- 
L1C RECIRC. MOTOR PURGE 

2 

GROSS RUPTuRE 

l.OOt-uT 

I.OOE-U9 

p;s> 

53 

PURGE SYSTEM 

CENTAUR ChECa’ VALVE (NEAREST 
TO LO, TANA PRESSuRE TRANS- 
DuCERtl 

l 

rupture or leaaage 

z.DJt-o: 

2.JUE-UV 

AC' 

54 

PuRaE system 

CENTAUR ChECa VAuvE (PuRTnEST 
FROM LO, TAMa PRESSURE TRANS- 
DUCERS) 

l 

GROSS RUPTURE 

).00[-uY 

l.uUE-09 

P-SS 

55 

PuRGE SYSTEM 

CENTAUR PYRO OPERATED VAlyE 

(to press, tw.as. purge, 

ETC. ) ... 

l 

GROSS RUPTURE 

l.JOE-gT 

l.UOE-UG 

POsS 

JrJ " 

Pusu system 

CENTAuR SOL(n01O COn’ROllEO 
SLlP regulating vAlvE ITO 
lOj vent stand-pipe i 

l 

GROSS RUPTURE 

l.UUC-u" 

l.uuE-u* 

PDS» 

5? 

PjRuE SYSTEM 

lh, tana, insulation purge 
VERT, jP TPAnSDuCERS 

} 

GROSS RUPTURE 

I.uuE-jS 

l.OuE-uo 

P.Si 

5 o 

PjRGE System 

in, tana, insulation pipe 

VERT, RELIEF VAlVES 

2 

GROSS RUPTURE 

l.UDE-UT 

1.U0E-U9 

Po» 

59 

PURGE SYSTEM 

lk, tana, insulation purge 
VENT, LINES i FITTINGS 

1 SET 

GROSS RUPTURE 

l.OUt-uA 
1 .OviE-u' 

PuSi 

6J 

yent systems 1 * 

LH, TANA SELF REGULATING VENT 
VAiVE 

l 

RUPTuRl OR LEAAAGE 

Z.OOC-D? 
2.0 0E-04 

a;t ■ 

61 

VERT SYSTEMS 13 

LINES 1 FITTINGS I&ETVEEn 
LM j VENT VALVES A DISCONNECT! 

l SET 

RUPTURE OR LEAAAGE 

5.00C-US 

S.OOt-Ua 

P0» 

* » 

VUT SYSTEMS 

LM ? TANA MEAT ElCHANGER 

t 

FAILURE OF Ml TAW MOUNTING 

J.OOE-US 

j.ooe-u 

PRJl 

W j 

VERT SYSTEMS 

LN, TAW CLCCTMICAi.Lt DRIVEN 
Pi*P 

1 

FAIL UR( OF PiAM OR MOTOR TANA 
MOUNTING 

J.OOE-US 

J.UOt-11 

PRCi 

64 

VtNT SYSTEMS 

LMj TAMA VENT OISCOnnECT 

l 

RUPTURE 0* LEAAAGE 

2.00E-OY 

2.UCE-u» 

PSSS- 

65 

VENT SYSTEMS 

lo, taw SUP regulating vent 
VALVE 

l 

RUPTURE OR LIAR AGE 

2.0vt-w T 

E.OvE-uN 

ACT 



Table A-2. Centaur Failure Modes Contributing to STS/Centaur Behavior Mode 
Category 11(b) of Table 3-4 (Page 4 of 6) 


no. 

WHICH MO so*. 
STSUN 

ITCH 

MO. 

ITEMS 

FAILURE MODE 

FAILURE RATE 
V ‘l 

WEIGHTING 

FACTOR 


64 

VENT SVSTEMS 

10, 7644 PNEUMATIC 06(4, 

spring-load closed, mll 
<aa<: 

1 

RUPTURE OR LEAAAGE 

2. DDE-07 
2.0UE-OB 

ACT 


67 

VENT SVSTEMS 

LUCS 1 FITT14GS (BETWEEN 
LO, 7*44 6 HCCHA41CAL <E47 

»a£wsi 

1 SET 

RUPTURE OR LEAAAGE 

S.OOE-OS 

S.OOE-Q7 

ACT 

/ 

64 

VENT SVSTEMS 

LOj^TANR ELECTRICALLY D6KCN 

1 

FAILURE OF PUMP OR MOTOR TANK 
MOUNTING 

6.QQC-0* 

6.Q0E-11 

PROB 

■/. 

6f 

<[47 SVSTEMS 

LH, TAMA WENT STSTCN C1SS 
TELESCOPING LlM( 

1 

RUPTURE OR E 

2.00E-05 

2.UUE-08 

POSS 


-J 

<[47 SYSTEMS 

LH, TAMA <E4T SYSTEM 0661 TEA 
1007 BULAHCAD FLEXIBLE LUC 

l 

RUPTURE OR LEAAAGE 

2. CUE -US 
2.00E-08 

POSi 

/ 

/ 

?i 

<[47 SYSTEMS 

LH, TAM* <EmT system orbited 
miu-body flexible lime 

1 

RUPTURE OR LEAKAGE 

2. DOE-OS 
2.UDE-IM 

POSS 


72 

<£47 SYSTEMS 

LH, TAMA <£47 SYSTEM ORBITED 
1107 BULAHEAD DISC0N4ECT 

1 

RUPTURE OR LEAKAGE 

2. DOE-07 
2.DDE-0B 

POSS 


71 

<[47 SYSTEMS 

LH, TAMA <[47 system ORBITED 
M1&-BOOY OI5COH4ECT 

1 

RUPTURE OR LEAKAGE 

2.00E-Q7 

2.UUE-09 

POSS 


76 

<£47 SYSTEMS 

LH, TAMA <E4T SYSTEM C1SS 
PNEUMATIC SHUTOFF BALL <AHES 

B 

RUPTURE OR LEAKAGE 

2.00E-07 

2.00E-09 

POSS 


74 

<£47 SYSTEMS 

LUES t FITTINGS (BETWEEN 
LH. <E4T SYSTEM CISS YALVCS 

6 fuel disconnect panel flex, 

LINE) 

l SETS 

RUPTURE OR LEAKAGE 

S.OOE-OS 

5.00E-U9 

POSi 


76 

<[47 SYSTEMS 

LUCS B FITTINGS (BET.ICN 
CISS LH, SHUTOFF < ALVES t 
1107 BULAHEAD FlEX. LINE 

I SET 

rupture or leakage 

S.UUE-05 • 

S.UJE-U9 

• POii 


* > 

<£47 SYSTEMS 

LINES 6 FITTINGS (BETWEEN 
CISS LH, SHUTOFF VAlyES 6 
ORBITED MID-BODY VENT) 

l SET 

ruptua: or leakage 

5. CuE-OS 
5.U0E-U9 

POSj 


76 

fill drain, dump 

S>iT(M .... 

lo 2 tana pyro shutoff valves 

2 

RUPTURE OR LEAKAGE 

I.00E-U7 

1.0UI-J9 

ACT 


7* 

fu. . or»:4.'3jw 

SYSTEM 

LINES 6 FITTINGS (BETnEEN 
LO, TAN* AND PYRO SHUTOFF 
VALVE 1 

1 SET 

RUPTURE OR leakage 

7.0UE-US 
7 .Oui -U d 

ACT 


CJ 

F l*i DRAIN 'OoHP 
SYSTEM 

10, TANA DlMP line QUJCK- 
OISCONNECT 

1 

rupture or leakage 

I.UUE-J7 

I.UJE-J9 

ACT 


81 

INTERMEDIATE BULK- 
HEAD Rti-UF SYSTEM 

PRESSURE TRANSDUCERS 

1 

RUPTURE OR LEAKAGE 

2.00E-0S 

2.CUE-U9 

ACT 


67 

INTERMEDIATE BULK- 
HEAD RELIEF SYSTEM 

CHECA VALVES 

2 

RUPTURE OR LEAKAGE 

7.OOE-07 

7.U0E-U9 

ACT 


81 

INTERMEDIATE BULK- 
HEAD RELIEF SYSTEM 

DISCONNECT (AT AFT FUEL 
PANEL) 

1 

RllPTjRC OR LEAKAGE 

2.00E-U? 
1. Out -09 

ACT 


94 

INTERMEDIATE BULK- 
HEAD SltlEF St$7[4 

ORIFACE (FROM 0S817ER GN. 
PuRmEI 

I 

RUPTURE OR LEAKAGE 

2.00E-D7 

2.00E-U9 

ACT 


65 

INTERMEDIATE bulk. 
HEAD RElIEF SYSTIM 

ciss flexible lues 

2 

RUPTURE or leakage 

2.0UE-0S 
2. OUE -08 

ACT 


96 

INTERMEDIATE BULK- 
HEAD RElIEF SYSTEM 

CISS VENT 

1 

RUPTURE OR LEAKAGE 

2.00E-J7 

7.UUL-09 

• ACT 


«’ 

INTERMEDIATE BULK • 
Hi 40 BUUf 57 5 7 EH 

LINES 4 F | TTIMGS (BETWEEN 
CAVITY B DISCONNECT) 

1 SET 

RUPTURE OR LEAKAGE 

2.CUC-UA 

2.1WC-J7 

AC T 


89 

!4T[RK£0iATl BULK- 
HEAD RlLlCF S<57[4 

LINES i FITTINGS UN CISS) 

l SET 

KUPTuAt OR LEAKAGE 

S.OOE-US 

S.UJE-U9 

ACT 



v 



s 

/ • 




Table A-2. Centaur Failure Modes Contributing to STS/Centaur Behavior Mode 
Category 11(b) of Table 3-4 (Page 5 of 6) 


FAIlURC RATt 


AO. 

VEHICLE AMO sub- 

system 

item 

NO. 

ITEMS 

failure mooe 

V ‘r 

WEIGHTING 

factor 

89 

INTERMEDIATE BULK- 
N£AO RELIEF SYSTEM 

CHECK VALVES 

2 

blockage 

2.00E-07 
2. Out -09 

ACT 

90 

C1SS MELUH SUPPLV 14 

HElUH MTTlES 

20 

GAOSS RUPTURE 

t.00t-7 

l.OOC-9 

PROS 

91 

C1SS HtLII* SUPPLY 

C1SS/0R51TER DISCONNECT 

1 

GROSS RUPTURE 

1.00C-07 

l.OOE-09 

PROB 

92 

C1SS HE L 1 UN SUPPLY 

flexible uni 

1 

GROSS RUPTURE 

l.OOE-OS 

1.00E-08 

PROS 

9J 

ciss helium supply 

PILOT OPERATtO SOLENOID 
VALVE 

A 

GROSS RUPTURE 

1 .OOE-C7 
l.OOC-09 

PROB 

94 

Ciss helium supply 

CHECK VALVES 

2 

GROSS RUPTlM 

1.00E-07 

1.0UE-09 

PROA 

95 

CISS hElIim Supply 

LINES A FITTINGS 

1 SET 

GROSS RUPTURE 

2.00E-04 

2.00E-07 

PROB 

96 

CCntajR helium Supply 

FILTER 

A 

GROSS RUPTURE 

l.OOE-OS 

1.00E-U8 

PRCB 

97 

CENTAUR helium supply 

CHECK VALVES 

A 

GROSS RUPTURE 

1.00E-07 

1.00E-09 

PROB 

98 

CEATAJR HELIUM SUPPLY 

LINES A FITTINGS 1 BETWEEN 
CEnTAUR/CISS DISCONNECT 1 
REGULATOR) 

1 SET 

GROSS RuPTuRE 

2. DOE -04 
2.00E-07 

PROB 

99 

CEATAUR HELIUM SUPPLY 

PRESSURE REGULATOR 

1 

GROSS RUPTURE 

1.00E-07 

l.OOE-09 

PROo 

100 

centaur hElIi* Supply 

relief valve 

l 

GROSS RUPTURE 

1.00E-07 
1 .001-09 

PRC B 

101 

centaur helIiry SUPPLY 

HELIUM BOTTlES 

2 

RuPTuRE A FRAGMENT PROPAGA- 
TION 

l.OOE-7 

1.0UE-9 

PRut 

102 

CEatajR helium supply 

LINES A FITTINGS (BET.EEN RE- 
GULATOR A 1ST PyRO YAtfES OF 
N,M. A ENGINE CONTROLS 
SYSTEMS) ■ ■ 

1 SET 

GROSS RuPTuRE 

1.00E-04 

1.00E-07 

PJSs 

luJ 

reaction control 

SYSTEM 

HYDRAZINE SUPPLY TANK (GN« 
SIDE ABOVE LINER) 

1 

GROSS RuPTuRE 

1.00E-07 

l.OOE-09 

PRGo * * 

lu4 

Rf ACTION CONTROL 
SYSTEM 

N>M 4 TANK ISOLATION PYRO 
VALVES (On UPSTREAM (A* 
PRESSURIZATION SIOE) 

2 

GROSS RUPTURE 

1.00E-07 

l.Out-09 

POsv 

1 j$ 

REACTION CONTROL 
SYSTEM 

LINE (ON UPSTREAM 1h* SIDE 
OF TANA) 

1 SET 

GROSS RUPTURE (LINE BETWEEN 
N£> 4 t AW AXO ISOLATION PYRO 

5.O0E-0S 

S.OOE-Oa 

POSs 

1 jt 

REACTION CONTROL 
SYSTEM 

FILL A VENT VALVE (ON UP- 
STREAM Gh« SIOE OF TANA 1 

l 

GROSS RUPTURE 

1.00E-07 

1.0UE-09 

P*>$ 

107 

hydraulic system 18 

PRESSURE A RETURN LINES ( IN- 
CLUDING JOINTS A FITTINGS) 

2 SETS 

GROSS RUPTURE (PRESSURE LINE 
- 100 PS! when IN SHUTTLE) 

2.00E-04 

2.0UE-J7 

PCSy 

108 

MYORAULlC SYSTEM 

SERVO VALVES 

A 

GROSS RUPTURE 

1.00E-07 

l.OOE-09 

P.jS 

109 

mydRAjlIC system 

MANIFOlO ASSE»SlY 

2 

GROSS RJPTuRE 

1.0JC-07 

l.OuE-09 

PJSi 

110 

MYORAULlC SYSTEM 

engine oriyen pu*> 

2 

CASE RuPTuRE 

1.00E-07 

l.OOE-09 

PUSS • • 

111 

MYORAULlC SYSTEM 

RECIRCULATION PJMP 

2 

CASE RUPTURE 

1 .001 -0? 
l.OOE-09 

P0S5 

112 

HYDRAULIC system 

RElIEF VAlyES 

A 

GROSS RUPTifiE 

1.00E-07 

1.001-09 

POSS 




Table A-2. Centaur Failure Modes Contributing to STS/Centaur Behavior Mode 
Category 11(b) of Table 3-4 (Page 6 of 6) 

FAILURE RATE 


NO. 

VEHICLE AMO SUB- 
SYSTEM 

ITEM 

MO. 

ITEMS 

FAILURE mode 

V ‘a 

HEIGhTInu 

factor 

111 

HYDRAULIC SYSTEM 

CHECK VALVES 

4 

GROSS RUPTURE 

l.OOE-U? 

1.0OE-O9 

POSS 

n« 

HYDRAULIC SYSTEM 

PRESSURE TRANSDUCER 

2 

GROSS RUPTURE AT FITTING 

I.OOE-05 

l.OOE-UO 

POSS 

US 

HYDRAULIC SYSTEM 

TEMPERATURE TRANSDUCER 

2 

GROSS RUPTURE AT FITTING 

l.OOE-OS 

1.00E-08 

POSS 

116 

HYDRAULIC SYSTEM 

DISCONNECTS 

4 

GROSS RUPTURE 

1.00E-07 

1.Q0E-U9 

POSS 

in 

PNEUMATIC valve 
COnTRO.. SYSTEM*'' 

DEPLOYMENT ADAPTER LINES 4 
FITTINGS TO PNEUMATIC ACTI- 
VATED VALVES 

2 SETS 

GROSS RUPTURE (FROM SOLENOID 
VALVES TO FLEXIBLE LINE) 

l.OOE-OS 

l.OOE-Oo 

pass 

lid 

pneumatic yalye 
CUNTROl system 

DEPLOYMENT ADAPTER SOLENOID 
VALVE (TO PNEUMATIC ACTI- 
VATED VALVESI 

1 

GROSS RUPTURE 

l.OOE-O? 

1.00E-09 

POSS 

119 

pneumatic yalye 

CONTROL SYSTEM 

DEPLOYMENT ADAPTER FLEXIBLE 
LINES (TO PNEUMATIC ACTI- 
VATED VALVESI 

2 

GROSS RUPTURE 

l.OOE-OS 

1.00E-06 

POSS 

120 

pneumatic yalye 

CONTROl SYSTEM 

DEPLOYMENT ADAPTER/CENTAUR 

pneumatic valve actuatioi 

DISCONNECT 

2 

GROSS RUPTURE 

l.OOE-O? 
1. ODE -09 

pass 

la 

PNE-MAT1C VA k vE 
CONTROL system 

CENTAuR CHECK VALVES (TO 
PNEUMATIC ACTIVATED VALVES) 

4 

GROSS RUPTURE 

l.OOE-07 

I.OOE-U9 

POSS 

122 

PNl-MATIC yalye 
control system 

LINES t FITTINGS (DOnnSTREAM 
OF REGULATORS IN C1SS TO 
FILL/OUMP i VENT VALVES) ' 

4 SETS 

GROSS RUPTURE 

l.OOE-UA 

l.OOE-O? 

Puss 


Pneumatic valve 
control System 

C1SS 3-nAY SOLENOID VAlVE 
ACTUATORS 

20 

GROSS RUPTURE 

l.OOE-O? 
1 .U0E-U9 

POSs . 

u* 

PNE.MATIC VA.VE 
control system 

C1SS SOLENOID CROSS CON- 
NECTION VALVES 

3 

GROSS RUPTURE 

l.OOE-O? 

1.00E-U9 

POSS 

Hi 

PnEjMATIC VALVE 
control SYSTEM 

C1SS PRESSURE TRANSDUCERS 

10 

GROSS RUPTURE 

l.OOE-OS 
1 .OuE-Oo 

PCSs 

126 

PNEUMATIC valve • 
CONTROL SYSTEM 

centaur solenoio cross con- 
nection VALVES 

' 2 

' GROSS RUPTURE 

l.OOE-J? 

l.OUE-39 

POSS 

'.V 

pneumatic valve 
control system 

UNES 4 FITTINGS (TO VENT 4 

Dump valves In centaur) 

5 SETS 

GROSS RUPTURE 

1 .OOE-uA 
l.OOE-O? 

POSs 

12» 

pneumatic valve 
control system 

CENTAUR 3-nay solenoid valve 
ACTUATORS 

10 

GROSS RUPTURE 

l.OOE-J? 
1 .001-09 

POSs 

129 

PNljMATIC VAlVE 

control system 

CENTAUR LO, tank VENT VALVE 
1-NAY SOLENOID ACTUATOR 

1 

INADVERTENT OFCRATION 20 

l.OOE-US 

l.OOE-Oo 

ACT 

l3v 

CENTAuR STRUCTURES 21 

CONICAL SPACECRAFT adapter 

1 

structural collapse 22 
(Shuttle g loads' 

l.OOt-UB 

l.OuE-1) 

POss 

131 

CENTAuR STRUCTURES 

centaur support structure 
(aft) (including trunions) 

1 UNIT 

structural collapse 24 

(ShuTTlE g LOADS) 

3 .OOE-Ud 
3.0UE-U 

PR-i 

132 

CENTAUR STRUCTURES 

centaur support structure 

(AFT) ATTACHMENTS 

5 

structural collapse 24 

ISHvTTlE g LOADS) 

l.OOE-OS 

l.OUE-11 

PRu= 

133 

CENTAUR STRUCTURES 

AFT ADAPTER 

1 

STRUCTURAL collapse 24 
(shuttle g loads) 

3.00E-08 

3.UUE-11 

PROS 

134 

CENTAuR STRUCTURES 

deployment adapter .(includ- 
ing TRUNIONS) 

1 UNIT 

STRUCTURAL COLLAPSE 24 
(Shuttle g LOADS) 

3.00E-08 

3.WE-11 

PRO? 

135 

CENTAuR STRUCTURES 

rotation mechanism support 

STRUCTURE 1 INCLUDING kEEl 
PIN) 

1 UNIT 

STRUCTURAL COLLAPSE 24 
(Shuttle g LOADS) 

3. OOE-Ud 
J.OOE-11 

PRus 





FOOTNOTES FOR TABLES A-l, A-2 AND A-3 


1. Rupture of the LO 2 tank Is considered to lead directly to the 
failure of the LH 2 tank with resulting oxidizer propellant mixing 
and fire and explosion In the payload bay. Rupture of the LH 2 tank 
will not necessarily lead to failure of the L0 2 tank, but 
sufficient oxygen Is likely to be present In the payload bay (until 
payload b^y doors opened) to support combustion. 

2. Duct Includes tank-to-duct transition pieces, elbows, etc. 

3. It Is assumed that fuel and oxidizer Is present In feed lines up to 
pre- valves only. Not concerned with ruptures of feed ducts, 
flexible joints, etc., downstream of pre-valves when Centaur Is In 
Grblter. 

4. Some parts of the system are under pressure equal to, or in excess 
of, 4000 p.s.1. Other parts under considerably less pressure (< 

500 psl). Parts subjected to > 4000 psl pressure are assigned a 
weighting factor of 'probable'; parts subjected to « 4000 psl 
pressure are assigned a weighting factor of 'possible.' 

5. These failure modes (rupture and gross leakage) are considered to 
result In direct and rapid failure of the tank. They have been 
assigned a single failure rate. Relatively small leaks are not 
considered catastrophic, since Centaur propellants can be dumped 
and abort procedures Initiated before tank collapse occurs. Back 
up means are available for maintaining fuel tank pressures In the 
event propellants are dumped. 

6. Six of the solenoid valves on the LH 2 tank side and two on the L0 2 
tank side (In Centaur) are under back pressure from the tanks. 

Gross leakage Is therefore a potentially catastrophic failure mode. 


7. While Centaur Is In the Orblter, only two of the check valves In 
the GH2 pressurization lines are under back pressure from the LH 2 
tank. The rest of the dormant GH 2 tank pressurization lines, 
valves, and fittings are excluded from the analysis. 

8. Leakage failure modes have been excluded. Even if the system Is 
shut down (system leaks sensed from the Orblter) the centaur helium 
supply, and related pressure regulation, will take over essential 
functions. 

9. Except for Nos. 55, 65, 66, 69, and 72, leakage failure modes have 
been excluded. Even If the system Is shut down (system leaks 
sensed from the Orblter) time is available, even In extreme cases, 
to dump propellants and Initiate abort procedures. There Is no 
requirement for. tank insulation system purge during the boost 
phase. 

10. Loss of motor purge Is considered to potentially cause explosion 
and fire of the recirculation pump of the hydraulic system. 


11. Leakage or rupture. In certain line sections, could result In 
direct failure of the fuel tanks. 

12. Venting of the L0 2 tank Is not necessary during the boost phase, 
assuming the tank can absorb all energy Input when L0 2 Is 
adequately mixed via the electrically driven pump. Therefore, 
failures downstream of L0 2 tank vent valves are not considered to 
be Category 1 and have been excluded from the analysis. 

13. Ruptures or leakages downstream of the LH 2 vent valves could result 
In gaseous hydrogen being released to the Orblter payload bay, with 
the possibility of fire and explosion. 


14. With the pyrotechnic shutoff valves on the fill/drain and dump 
system normally closed (unless opened to dunp fuel In an abort 
mode) failures downstream of the 1 st set of pyro valves (closest to 
tanks) cannot be classified as Cat 1 and therefore are excluded 
from the analysis. 

15. Inauvertent opening of normally closed flll/draln and dump valves 
Is not of concern since two or more valves would have to be 
affected before Inadvertent dump could occur. This Is not a 
Category 1 failure mode and therefore Is excluded from the 
analysis. 

16. Leakage failures are excluded as contributors to potential 
catastrophic events. Instrumentation on the Orblter will sense 
these leaks and cause shut-down of the system. Back-up means are 
available for providing essential helium supplies (Centaur helium 
system) or essential functions in the event that C1SS helium is not 
available. 

17. ' If rupture occurs, on the GHe (tank, pressurization) side then 

concern is for possible propagated effects. If rupture or leakage 
occurs on N 2 H 4 (hydrazine fuel) side then f>re and explosion Is 
considered probable up to opening of the payload bay doors. 

18. All lines are assumed to be under approximately 100 psl pressure 
while Centaur Is In the Orblter. 

19. Rupture of any one line in the C1SS or Centaur pneumatic valve 
control system will not prevent operation of fill/dump and vent 
solenoid actuators, unless the failure propagates. 

20. Inadvertent operation of solenoid actuation valves of the valve 
control system could result in Inadvertent operation of LH£ and/or 




* 

•j 

LOg tank vent valves. Of concern is Inadvertent opening of 
normally closed vent valves, which could lead to excessive venting 
and tank collapse. Inadvertent closure of normally closed valves 
Is of no concern since redundant paths for venting are available. 

21. Failures of Centaur engine support structures have been excluded 
even though they could result In failure of Centaur fuel lines. It 
Is assumed that fuel lines are empty upstream of tank pre-valves 
and so ai\y failures In this upstream section would be benign. 

22. This failure mode could result In tilting of the spacecraft and 

failure of Its hydrazine or helium bottles which could lead to fire < 

and explosion in the payload b^y. 

23. This failure mode could result In tilting of Centaur, failure of 
the LH 2 tank and fire and explosion In the payload bay. 

1 

24. This failure mode could. result. In tilting of Centaur and failure of 
the LO 2 tank (followed by the LH 2 tank) or failure of Centaur He 
bottles. The end result could be fire and explosion in the payload 
bay. 

25. Should the Centaur fail to separate from the orbiter, because of 
failure for example of the Super*Z1p, the Centaur would be rotated 
back down into the payload bay and an abort sequence undertaken. 

These types of failure modes are therefore excluded from the 
analysts since they are not Category 1. 

Two or more adjacent deployment adapter springs would need to fail 
to cause a recontact of Centaur with the deployment adapter. This 
Is not a Category 1 failure mode and so Is excluded from the 
analysis. 




26. Rise-off fluid disconnects on lines less than 2 Inches In diameter 
will not pose a potential threat from re-contact of Centaur with 
the Qrblter at separation. These small lines are not considered 
strong enough to pose a threat If they become hung up. 



APPENDIX B 

STS FAILURE MODES 
(Liftoff to MECO) 

(Contributing To Combined STS/Centaur Behavior Mode 
No. 6 As- Outlined In Table 3-4) 

The failure rates quoted In this Appendix are In units 
of hour,"* unless otherwise stated 
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Table B-l. 


Criticality 1 Component Failure Modes by Vehicle Response Mode Category (Page 1 of 6) 



CAT t GOAT 6: tlTENNAl TAM PUHCTUAEO (FROM ORBITER IMACT, SHRAPNEL, m FAILURES, (TC.) 


HO. 

VCMICLI AMO 

IUN 

failure NOOE 

TIME 

NO. 1 TINS 

DOC./PAGl 

NOTES 

failure 

RATES 

4 t&N'ING 

Sut system 

PERIOD 

V 

9 



i 

NAS (OM) 

12* 10? FEEOIIMCS TO CACH 

ss« 

RUPTUNC 0« (.IMAGE 

l.I.S.P 

1 

I/M6 


l.OOt-OR 

1 . OOE -07 

PROB 

t 

HAS (OM) 

r tM? RECIRCULATION BT- 
MSS MO AC TUAN UNCS OA 
SSHIl 

BUB TORE OR LEAKAGE 

l.I.S.P 


1/967,970 


6. OOC -OS 

4.00E-0* 

r*OS 

.. 

i 

NAS (OM) 

10? BICtO, ACCIACUlATtON 
AOCO SUAAAISSION t INC 
ASSEMBLY 

OP UtttfC 

L.I.S.P 


1/971 


soot-os 

S.OOt-W 

PROB 

4 

MAIN PROPULSION 
SYSTEM lOAft ) 

LH? rcco DISCONNECT PNEU- 
NAl 1C SHU! -Of r VALVE 

FAIL TO REMAIN OBEN CAUSED 
BT FIARBEA LINKAGE STRUC- 
TURAL FAILURE 

l.I.S.P 

) 

I/9S9 


I.OOt-07 

1 OOE -09 

PROS 

s 

MAS (OM) 

10? rcco DISCONNECT RHEU- 
MATIC SHUT-Off VAC. VC 

TAIL TO REMAIN OBEN CAUSED 
BT riABBER LINKAGE STRUC- 
TURAL FAILURE 

t.I.S.P 


1/960 


1.00E-07 

1. 00E-09 

r«C* 

6 

MAIN PROPULSION 
StSTtN (ORB) 

. 

hUIUM ACCUNJLATOA (TO t*s 
VALVES) 

RUPTURE VITN RESULTING 
DAMAGE to surrounding 
COMPONENTS 

l.I.S.P 

I 

e /941 

ITEM CALLED 
'SURGE CHAN 
IN n. ts. u 
:il 

1 oot-o? 

IER 

1 .OOE -09 

‘OSS 

7 

NAS (OM) 

CO? CHECK VALVE SSMC 
ISOLATION 

FAILS TO RENMR OPEN 
(STOPS FION TO ET) 

l.I.S.P 

) 

1/98) 


). 001-06 

1. OOE -07 

MO* 

J 

VS (OAB) 

10; All lit LIKC 

RUPTURE OR LEAKAGE 

L.I.S.P 

1 

1/969 


s oot-c* 

S. OOC -06 

POSS 

9 

GIHSAi ASSEMBLY 
(ORB) 

GINBAl BEARING 

GINBAL STUCK CAUSEO BY 
BEARING SEtiURE 

l.B.S.P 

) 

ME/4-7R, 
b-l 0 


I.OOt-OS 

I.OOC-OG 

PCSS 

10 

ill* PROPULSION 
SYSTEM u)*8i 

KlIUN STftMAt TANKS 
54.000 PS\\ 

GROSS RUPTURE 

l.I.S.P 

S 

f / 9 19,94S , 
94(s,<»4 7 


T.OOE-07 

I.00E-09 

BOSS 

ti 

HYDRAULICS tO** ) 

T VC SERVO ACTUATOR jYLINOtl) 

RUPTURE OR LEAKAGE 

l.B.S.P 


1/7)9 

(6) 

S.OOt-OR 

S OOC * \ 0 

At* 

12 

HYDRAULICS vORBi 

1»C SERVO ACTUATOR POvER 
yALVE 

STUCK PONER VALVE SPOOL 

l.I.S.P 


e/ i«o 

(6) 

S.O'H-OT 

S. OOE -ON 

- AC* 

U 

HTOftAUCICS (ORB) 

TVC SERVO ACTUATOR FITTER 
EIEHCNT 

CLOGGED FILTER ELEMENT 

8.S.P 

< 

1/ 34 1 

tb) 

S 00E-06 

S. OOE -09 

4(T 

H 

MYWAU.1CS ^0*8) 

• 

TvC SERVO ACTUATOR .FEED- . 
BACK MECHANISM ' 

JAWED. OR SEPARATED NECH- 
AN ISM OR BROKEN ' 

l.B.S.P 


e/)48 

tb) 

S .COE -07 

S, OOE -0-0 

PPOK 

pp 08 

.5 

HYDRAULICS (MB) 

»UOO£R/$mo SWITCH. 

INC VAltt OUTPUT HANHClO 

RUPTURE OR LEAKAGE 

l.B.S.P 

1 

N-0/1-?) 

(b) 

s oot-w 

S.OOE-TO 

It 

HYDRAULICS (ORB) 

RuOOER/SRftO BRAKE « 
ChANNEI SERVO VALVE 

RUPTURE OR LEAKAGE 

l.B.S.P 

l 

M-B/I-.M 

tb) 

S.OOt-OB 

S. OOC -10 

PBOfl 

17 

KTORAIUCS (MB) 

ElEVON SERVO ACTUATOR 
CYLINDER assembly 

RUPTURE OR LEAKAGE 

l.B.S.P 

A 

H-l/)-2t 

(b) 

S.OOt-OB 

S OOE-TO 

rs'j 

18 

AuiIlIARy KWCR 
(ORBIUR) 

ABU CAS CINERATOR 

leakage FROM OtCOHPStSSION 
ChAMBIR SEAL FAIIURI OR 
INJECTION TUBE STRUCTURAL 

failure 

l.B.S.P 

) 

*/l2S3-!2S4 

(b) 

SAX -05 

S OOE -OR 

f -"S 

19 

AUKILIARY f-OXIR 
(ORBITU) 

ABU TURBINE SHUT -Of F 
SOLENOIO VALyE 

tails TO SliOT FROM CRACKED 
SEAT, CONTAHINATICVKLOGTC 

fail. ETC. 

l.B.S.P 

) 

l/)27?-T2?3 

(b).(i) 

S.ODE-OT 

S.OOt-OB 

POKS 

20 

AuKItURY f>ONl» 
(ORBITU) 

atm M* full STORAGE tanks 

CROSS RUPTURE FRONNAHRIAt 
OlflCTi 

l.B.S.P 

1 

B/I2S9 

(b) 

S OX -OR 

S OOE-IO 

mo* 




.[ 

- J 




/ 


l 


/ 


Table 8-1. Criticality 1 Component Failure Modes by Vehicle Response Mode Category (Page 2 of 6) 


C»KH»T 6: HTfRMt TIM RUNCIUltD (FROH OWITt* 1WACT, SHRAWCl, TRS MHUKS. |TC.) 


!K>. 

VEHICLE MO 
SU8 StSUH 

MEN 

FAILURE woe 

TIHE 

W. ITEMS 

DOC. /RAGE 

WTES 

FAILURE 

RATES 

WEIGHTING 

RERIOO 

' V 

a 

k » 

FACTO** 

21 

ACT I VC TNEWAl 
CONTROL (044) 

MATER SWAT WILES HATER 
TANA 

GROSS NURTURE 

L.I.S.R 

2 

8/?l? 

(1) 

S.OOE-OS 

S.OOE-IO 

ROSS 

22 

ACTIVE TWRNAl 
CONTROL (0R4) 

mater swat nun »* tan* 

gross rurtlwe 

L.I.S.R 

) 

• /Ml- 

0>) 

S.OOE-08 

8. 001-10 

ROSS 

22 

ACTIVE THERMAL 
CONTROL 

RFKMU HUE! AM) PIPING 

OVERPRESSURE RLIRTURt 

L.I.S.R 

( 

»/M4 

(6) 

1 .001-02 

1. OOE -Of 

ROSS 

24 

ATT REACTION CON- 
TROL ASSCWLT 
(ORI) 

HONCWTHTL HV6AA2INC (W«) 

feexine aw fittings 

RURTURE OR LEAKAGE OF 
LUES. VALVES OR riTTUGS 

L.I.S.R 

2 

*1028-1021 

u> 

I.00E-04 

1 .002-0? 

ROSS 

2S 

ATT REACTION CON- 
TROl ASStWLT 
|0«») 

NjOr 0II012ER TEEOLlNl AW 
FITTINGS 

RURTURE OR LEAKAGE OF 
LINES. VALVES OR FITTINGS 

L.I.S.R 

2 

•A 1 040- T 04 T 

«) 

I.OOE-OA 

I.OOE-OT 

ROSS 

26 

AH REACTION CON- 
TROl ASSEH4CT 
(048) 

W4H AW N»0« TANK ASSEH- 
ILIES 

RURTURE. LEAKAGE, OR TAM 
SEAL FAILLRE 

L.I.S.R 

• 

1/1042 

(6) 

2.00E-08 

2.00E-0S 

2.00E-I0 

2.00E-08 

RR04 

V 

ATT RUCTION CON- 
TROL ASSCWLT 
(ORI) 

m> AW NnOa TAM aCIlKE 
CIWlE joInt 

RURTURE OR LEAKAGE 

L.I.S.R 

12 

f/t04$ 

(8) 

2.00C-M 

2.00C-01 

ROSS 

2» 

ORIITAl NANEUVER 
STSTEH (ORI) 

NM AW H204 STORAGE TAMS 

RURTURE, LEAKAGE, OR 
TMK SEAL FAILURE 

L.I.S.R 

TO 

•/T1T4-TT1S 

(0) 

2.00E-08 

2.00E-02 

2.00E-10 
2. OOE -08 

RROI 

24 

ORIITAL HMEUVER 
STSTEH (ORI) 

WH MO NjOr TILL ANO 
DRAIN COuklNGS 

RURTURE OR LEAKAGE 

L.I.S.R 

2 

*/HM 

(O.td) 

2.00E-06 

2.00E-04 

RROI 

w 

ORIITAL NANEUVER 

STSTEH (ORB) 

IVW AW HjOr FECXINES 
VALVES 

RURTURE OR LEAKAGE 

L.I.S.R 

1 

l/ltIMlI] 

(0) 

1 OOE -04 

1 .OOE -0? 

RR08 

21 

ORIITAL NANEUVER 
STSTEN (Wl) 

GN ? TMR SURaV TO VALVE 
(2.S00 RSI) ACTUATORS 

GROSS RURTURE 

L.I.S.R 

2 

* 1 1 20-1 1 1T 

U) 

2 00C-08 

2.00E-IO 

PCSS 

22 

ORIITAL NANEUVER 
STSTEH (0«l) 

GN/ ACCVMA.ATOR 

GROSS RURTURE 

L.I.S.R 

2 

*hm-iis< 

(0,(0) 

2.00C-08 

2.0OE-I0 

ROSS 

22 

ORIITAL NANEUVER 
STSTEH (CM) 

HV AW N>0« FLERIXE 

CI.WLE. JOINT 

RURTVRE OR LUKAGE 

§n 

12 

*1122-112 

(4) 

2.00C-0! 

2. OOE -04 

P* 04 

24 

ORIITAl NANEUVER 
STSTEH (ORI) 

N. STORAGE TANKS (4.100 
«1) 

GROSS RURTURE 

mm 

B 

•/111 0- 1111 

(d) 

2 OOt-OS 

2.OOE-I0 

ROSS 

)S 

ORIITAL MANEUVER 
STSTEH (OH) 

ENGINE TO VEHICLE atUSlt 
CONNECTOR 

STRUCTURAL FAILURE ALLOW- 
IRC, LEAKAGE 

D 

■ 

8/1118-1111 

(d> 

2 OOE -06 

2. OOE -04 

PROS 

26 

ORIITAL NANEUVER 
STSTEH (ORI) 

GIHIIIE RING FORGING 
(ENGINE ATTAOWNT) 

STRUCTURAL FAILURE CAUSING 
FAILURE or FLERIXE CON- 
NECTO* 

L.I.S.R 

2 

. 8/11 24-1 1 22 

lc).(d) 

2 OOE -08 

2.004-10 

PR06 

21 

ORIITAL RitfUVER 
STSTEH (ORI) 

RRORniANT RSK ANO RQO 
CROSSEEEO COUPLING 

EITERNAl leakage TAW 

STRUCTURAL FAILURE 

L.I.S.R 

1 

8/1201-120 

(c).(d) 

2.00E-06 

2. OOE- 04 

POSS 

28 

AH REACTION 
CONTROL (ORI) 
ASSIH8LT 

N* STORAGE TANKS (4,000 
R>T ) 

GROSS RURTURE WITH PRO- 
POGATFD TRA STENTS RUP1UA- 
|HG PRORtlLMT TANKS 

L.I.S.R 

4 

*1012- 102 

(«) 

2.00E-08 

2. 004-10 

ROSS 

29 

An REACT 1C* 
CONTROL l«S) 

assprnt 

ENGINE MILOVS ASStWLT 

ETTFPNAi LERKAGl FKOH 
STRUCTURAL FAILURE 

L.I.S.R 

SI 

*1070-10? 

(c).(d) 

2. OX -06 

2. OOE -04 

>*0* 

40 

SEPARATION HtCN- 
ANISH (0’6/ET) 

PETONA’04 Of ATT ATTACH- 
HERT FRANGIBLE WT 

INADVERTENT OCTONATION 
SIGNAL 

L.I.S.R 

4 

P/H 

l 


2 OOE-06 

2. COt-0? 

ACT 



Table B-l. Criticality 1 Component Failure Modes by Vehicle Response Mode Category (Page 3 of 6) 


CATEG04V I: ElTERNAL TAN* PUNCTURED (FROM 0N6ITCR IMPACT. SHRAPNEL, TPS FAILURES. (TC.) 


NO. 

VEHICLE AND 

ITEN 

FAILURE NODE 

TIME 

NO. ITEMS 

OOC./PAGt 

NOTES 1 

TAUURE 

RATES 

wflGnTlNG 

sue s»suw 

PERIOO 



i 

V 

S 

FACTOR* 

41 

SEPARATION N»CH- 
MISM (ORB/ET) 

AFT FRANGIBLE NUT 

PREMATURE FRACTURE THROUGH 
STRUCTURAL FAILURE 

L.B.S.P 

z 

B/98-99 



3.00C-OB 

3.00E-1I 

ACT 

« 

SEPARATION NfCH- 
ANISN (ORI/ED 

AH BOLT 

STRUCTURAL FAILURE 

L.B.S.P 

z 

B/101 



3.001-08 

3.00E-I1 

ACT 

4, 

SEPARATION FFECN- 
AN1SN (ORI/ET) 

AFT FRANGIBLE NUT CART* 
RIDGE BOOSTER 

INADVERTENT OPERATION 

L.B.S.P 

4 

B/IOZ 



3.00C-06 

3.00E-07 

ACT 

44 

SEPARATION <CH- 
ANISN (0R8/ET) 

PRESSURE CARTRIDGE OF 
FORWARO SEPARATION BOLT 

INADVERTENT OPERATION 

L.B.S.P 

z 

t/10) 



J.00E-06 

s.oot-oz 

ACT 

4S 

SEPARATION MECH- 
ANISN (0«8/tT) 

FORNARO BOLT 

STRUCTURAL FAILURE 

L.B.S.P 

1 

e/ 104 



3.00E-0B 

3.00E-I1 

ACT 

«l 

ORI/ET FORNARO 
ATTACRHNT 

SUPPORT STRUCTURE 

STRUCTURAL failure 

L.B.S.P 

1 

E-l/6-9 



l.OOE-OB 

J.OOE-'l 

ACT 

I) 

048/CT AFT 
ATTACHMENT 

SUPPORT STRUCTURE 

STRUCTURAL FAILURE 

L.B.S.P 

z 

E-f/t-IO 



l.OOE-OB 

3.00E-II 

ACT 

*8 

0R8/ET FORNARO 
ATTACMNENT 

SPINOUS 

SEIZED (ROTATION SEIZURE) 

L.B.S.P 

z 

E/P-C-S5 



I.OOE-OS 

l.OOE-OB 

POSS 

49 

CAB/ET rORUARO 
ATTACHMENT 

ET BIPOO FITTINGS 

SEIZED (ROTATION SEIZURE) 

L.B.S.P 

z 

t/P-C-SB 



1 .00E-05 

l.OOE-OB 

POSS 

SO 

ORI/ET AFT 
ATTACHMENT 

PIVOTAL SUPPORTS 

SEIZURE 

L.B.S.P 

IZ 

E/P-C-9 



I.OOE-OS 

I .OOE-Ofl 

PCSS 

« 

ORI/ET AFT 
ATTACWCNI 

SLIDING SUPPORTS 

SEIZURE 

L.B.S.P 

z 

t/P-C-SI 



I.OOE-OS 

l.OOE-OB 

PD5S 

SZ 

external tank 

LHj TANA BARREL TPS 

SEPARATION FROM f T OR 
STRUCTURAL failure out TO 
UNCLEAN SURFACE OR INADE- 
QUAIE DUAL ITT 

100- 
IZ« SEC 

1 

NOT IN 
•CIL' DOC'! 



3. P0t-06 

3.0CE-0T 

POSS 

S3 

EXTERNAL TANA 

lm 2 TANA AFT OONE TPS 

SEPARATION FROM ET OR 
STRUCTURAL FAILURE DUE TO 

unclean surface or i made - 
•QUA IE .QUALITT - ■ . 

EIFTOFF 

’ 

NOT IN 
'CIl'DOC'S 



3.00E-04 

3.00C-07 

POSS 

M 

EXTERNAL tana 

LO z TANA OGIVE TPS 

SEPARATION FROM ET OR 
STRUCTURAL FAILURE DUE TO 
UNCLEAN SURFACE OR INADE- 
QUATE QUALITY 

100- 

I?* SEC. 

I 

NOT IN 
'CIL' DOC'S 



l.OOE-OB 

3.00E-07'. 

PROS 

SS 

SR8 

THERMAL CURTAIN MEAT 
SHIELD TPS 

SEPARATION FROM SRI OR 

structural failure due to 

UNCLEAN SURFACE OR INADE- 
QUATE QUALITT 

100- 
IZ« SEC 

z 

NOT IN 
•CIL' DOC'S 



l.OOE-O* 

3.00C-07 

PCSS 

St 

electrical POKER 
IORI! 

Oj tana SU6ASSEN8LT NEPISERS 
1 , Z ANO 3 

OYCRPRf^URt RHPTURCl 
cictss hut input FROM 
HfAURS OR NAURIAl OCftCT 

1.6 

1 

ti 46M6B. 
471 

(*) 

SEE 

S-37 

l.OOE-OB 

I.OOt-IO 

PROS 

s? 

ELECTRICAL POKER 
(ORS) 

Hj TANA SUIA5SEN6LT NUMBERS 
1 , 2 ANO ) 

OVERPRESSURE RUPTURI ; 
EXCESS HEAT INPUT (ROM 
HEATERS OR MATERIAL DEFECT 

1.6 

J 

0/469,470, 
4 7? 

(«) 

SEE 

S-1B 

l.OOE-OB 

1 OOE-IO 

PROB 

58 

ATMOSPHERIC 

revitalization 

AUXtllARr 0> STORAGE TANK 
(900 PSI) 

OVERPRESSURE RUPTURE 

1.8 

l 

B/SSB 

(A) 

SEE 

5-39 

S.OOE-09 

s ooi-n 

PPC8 

S9 

atmospheric 

revitalization 

N; STORAGE TANAS (1,000 
PSD 

OVERPRESSURE RUPTURE 

l.B 

4 

P/StB 

(.) 

SEE 

S-40 

S.OOE-09 

5 OOE-D 

* POSS 
.. .... 
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Table B-l. Criticality 1 Component Failure Modes by Vehicle Response Mode Category (Page 4 of 6) 


C»TKO*?»: EXTERNAL TANK PUNCTURED (FROM 0MM» IMPACT. S»4»APNCl. TPS FAILURES. tTC.) 



VEHICLE ANO 

1TCK 

FAILURE WOC 

TIME 

NO. ITEMS 

DOC. /PAGE 

NOTES 

TAILURE 

RATES 

•RIGHTING 


50# S*STEN 

PE M 1 00 

1 

U 


FACTOR* 

60 

ELECTRICAL POWER 

ia*t) 

0> TMK $UW$S£M*v WtJttCi! 
I.2AN0) 

OVERPRESSURE RURTU#Ci 
EXCESS HEAT INPUT F#0# 
HEATERS ON MATERIAL DETECT 

P 

1 

t/46? ,46ft. 

in 

SAME AS 
• 56 

7.00E-0# 

7.00C-10 

PRO# 


eiccmicAL row c* 
(0«) 

»» TAN# SUBASSEMBLY NUMBERS 
1, 7 A#0 3 

OVERPRESSURE RUPTURrt 
EICES5 HEAT INPUT FROM 
HEATERS OR MATERIAL DEFECT 

P 

1 

9/469,470, 

477 

SAME AS 

*57 

7.00C-08 

7.00E-10 

PRO# 

t: 

»nes4Hf«ic 

REVITALIZATION 

AUXILIARY 0; STORAGE f*## 
(900 #51) 

OVERPRESSURE RUPTURE 

P 

1 

9/5S# 

SANE AS 
• 58 

1 .OOE-08 

I.OOC-IO 

PRO# 

63 

ATMOSPHERIC 

revitalization 

# 7 STORAGE TANAS (1.000 
PSt) 

OVERPRESSURE RUPTURE 

P 

4 

9/S68 

SANE AS 
*59 

1.00C-08 

l.OOt-lO 

POSS 

M 

FONWARD REACTION 
CONTROL ASS£M»IV 
10«I> 

«M ANO NjO« LINE FLIIIM.E 
ASSEMBLIES 

RUPTURE OR ICAkACE 

l.I.S 

7 

9/IORS 

(*) 

SEC 5-31 

5.001-07 

S.OOt-IO 

POSS 

H 

F0»NARD REACTION 
CONTROL A551N6LT 

to##). 

l#*t AND NjO. TAN# ASSEN- 
#U£S 

RUPTURE, LEAKAGE 0# TAR# 
SEAL FAILURE 

l.B.S 

2 

9/1 ORB 

(t) 

SEC 5-37 

5.00C -09 
S.OOC-06 

S.OOE-ll 
5.00C -09 

PPOB 

M 

TONwARO REACTION 
CONTROL ASSEMBLY 
i0«#) 

mu rua rtcoiiNC and 

riTTINCS 

RUPTURE OR LEAKAGE OF 
LINES, VALVES. OR FITTINGS 

l.#,S 

1 

9/1094-1097 

(4) 

SEC 5-33 

3.00E-06 

3. OOE-OB 

POSS 

6? 

ro**ID REACTION 
CONTROL ASSEWLV 
(0A») 

*-G. OXIDIZER FECOLINC ANO 
fllllNGS 

RUPTURE 0* LEAKAGE OF 
LINES, VALVES, OR FITTINGS 

L.B.S 

1 

9/ 1094-1097 

(4) 

SEE S-34 

3 OOE-06 

J.OOt-Cft 

POSS 

66 

ro*tsA«o reaction 
CONTROL ASSEMBLY 

to##) 

H, STORAGE TANKS (A.OOO 
PSI ) 

GROSS RUPTURE NITH PRO- 
PAGATEO FRAGMENTS RUPTUR- 
ING PROPELLANT lANK(S) 

L.B.S 

2 

MI089-I09C 

(«) 

set SOS 

S OOF -09 

s.ooe-ii 

POSS 

69 

FCRhARO REACTION 

CCVR0L ASSEMBLY 

(C*#l 

FLEXIBLE COUPLINGS ANO 
FITTINGS 

rupture AT PRIMARY OR 
VERNIER THRUSTER 

l.B.S 

37 

ft/I0*4 

( 4 ) 

SEC S- 36 

I.00E-06 

I.00E-09 . 

POSS 

70 

ro**A»D tCACUGn 
cy-sx assist 

i0»8i 

7#N> ANO N,0 4 LINE FLEXIBLE 
ASSEMBLIES 

RUPTURE OR LEAKAGE 

P 

7 

6/1085 

SAHf AS 
•64 

I.OOE-06 

1.001-09 

POSS 

M 

FORWARD REACT 10# 
CCN’ROL ASSEMBLY 
(0#S) 

WN AHD K-*Oa’ TANK ASSr*« 
BlUS 

RUPTURE. LEAKAGE OR TANK 
seal failure 

P 

2 

9/1086 

safe as 

•6S 

1 OOE-OB 
l.OOC-OS 

1 .ooc-io' 

1. 00C-08. 

PRO# 

?? 

FORWARD REACT to# 

CCNT50L A5SEHM.T 

toe#) 

hah FUEL FEEIXINf ANO 
E I T TINGS 

RUPTURE OR LEAKAGE OF 
„INES. VALVES, OR FITTINGS 

P 

I 

9/1096-1097 

SAMf AS 
•66 

5.00E-05 

5 00E-08 

POSS 

73 

FCRwARO REACTION 

iC0#’#OL assenslt 
•MS) 

N.O. OXIDIZER FECOUNC ANO 
r 1 1 T (MGS 

RUPTURE OR LEAKAGE OF 
LINES, VALVES, OR FITTINGS 

P 

1 

9V1096-1097 

SAHC AS 
*67 

5.00E-0S 

S 00C-08 

FOSS 

74 

i 

I 

1 TOAWLSO REACTION 
, CONTROL ASSEHBlT 
j 10#*) 

H. STORACE TANKS (A.OOO 
rsi) 

gtqss nurrun with mo- 

PAGATEO nuaCNTS PUPTU*. 
IHG PROrtUAAT UlU(S) 

P 

2 

*lOAq-in<K 

SA*C AS 
• 6fl 

1. OOf-O# 

l.OOE-IO . 

POSS 

75 | fOCisMO REACTION 
• CONSOL AS5i»6H 

! (o*ei 

t 

FLEXIBLE COUPLINGS ANO 
F ITTINGS 

Rupture at prihlrt or 
VERNIER. THRUSTER 

P 

37 

0/1084 

SANE AS 
• 69 

7.00E-06 

7.00E-09 

POSS 

76 

,w>5 (ORB) 

IKj RECIRCULATION W 

HOUSING RUPTURE 

l.B.S 

3 

#'9S8 

SEE 9-14 

1 OOC-07 

1 OOE-09 

POSS 

77 

j«PS (0**) 

i 

i 

I?* IM; EEEOIINCS TO EACH 
jSS«E 

RUPTURE OR UAKAGE 

l.B.S 

3 

P/963 

SEE 9-IS 

I.OOE-04 

l.00f-0>. 

pt?0fl 





Table B-l. Criticality 1 Component Failure Modes by Vehicle Response Mode Category (Page 5 of 6) 


CATEGORY t: EXTERNAL TAM PUNCTURED (FAOH MUTER IMPACT. SHRAPNEL. TPS FAILURES. ETC.) 


NO. 

VEHICLE AMO 

sun system 

ITEM 

FAILURE NOOE 

TIME 

M. ITEMS 

OOC./PAGC 

MOHS 

FAILURE 

RATES 

WEIGHTING 

PERIOO 


y 

‘l 

FACTOR’ 

II 

WIN PROPULSION 
SYSTEJ* (OAT) 

2* Ctb PRESSURIZATION 
DISCONNECT »AL»E 

VALVE FAILS CLOSED CAUSING 
LH2 TANK STAUCTUAAL failuai 

t.I.S.P 

I 

i-l/4-7 


l.OOE-O? 


POSS 

I» 

S .SMC (DM) 

MAST OIAMAAGM 

RUPTURE OF Nj LINES 

oiapmuoq 

I.I.S 

» 

KSC/J-52 

SEE 1-16 

1.00C-04 

\ .001 -CM 

ACT 

10 

m (ou) 

LHj IEIIEF LINE 

RUPTME OA LEAKAGE 

L.I.S 

1 

I/HI 

SEE 1-17 

500C-04 

S.OOC-04 

PRO! 

11 

MIN PROPULSION 
SYSTEM IM6/E7) 

4* DIANETEA LM? AEC1RCU- 
LAT10N LINE 

RUPTME 

I.I.S 

I 

I/1S2 

SEE 9-16 

2.00C-04 

2.OOC-07 

PROI 

12 

MIN PROPULSION 
SYSTEM (OAI/IT) 

11* LM* FCEOLINE AM 
MANIFOLD ASSEMLY 

WVJU CM L UJJU 

L.I.S 

1 

I/HI -942 

SEE 1-11 
1 20; (•) 

5.00C-05 

s.ooe-m 

ACT 

1) 

lC 2 FCCOLIM (IT) 

II’ AACO-CAEAVY SEALS 

EXCESS LEAKAGE 

t.I.S.P 

■ 

E/P-C-4 

(•) 

1.00E-04 

l.OOE-O? 

POSS 

64 

LO; FEEDLINE (IT) 

11* FLEXIBLE COUPLING 
(AIGIO LINE AM KLLONS) 

EXCESS LEAKAGE FROM STRUC- 
TURAL FAILURE OF FUSION 
NELOS LINE TO IELLQMS 

L.I.S.P 

s 

E/P-C-J 

(•) 

I.OOE-OS 

I.00C-07 

(COUPLING 

i.ooE-oa 
I.OOE-IO 
M WCLO) 

POSS 

IS 

10; FEEDLINE (IT) 

II’ FLUIILE COUPLING 
(11(10 LINE AM IELLQMS) 

SEIZURE (MU AM SOCKET) 
CAUSING L02 FEEDLiNE 
STRUCTURAL FAILURE 

L.I.S.P 

s 

E/P-C-l 

(.) 

I.OOt-OS 

l.OOE-O' 

(COUPLING 

l.OOt-OB 
T OOt-lO 
AM WtLO) 

PRO! 

M 

102 FEED*. INE (ET) 

PIVOTAL SUP FONTS 

SEIZURE (BALL AM SOCKET) 
CAUSING 10 2 FEEDLINE 
STRUCTURAL FAILURE 

L.I.S.P 

27 

E/P-C-1 

(•) 

I.OOE-OS 

1 .OOE-Ot 

POSS 

II 

l0 2 ANTIGtYSEA 
LINE (ET) 

4’ FLEX ISLE COUPLING 
(AIGIO LINE AM UlLOWS) 

EXCESS LEAKAGE FROM STRUC- 
TURAL FAILURE or FUSION 
WELDS LINE TO BELLOWS 

L.I.S.P 

1 

E/P-C-12 

(■) 

1.00E-C5 

l.OOE-O? 

(COUPLING 

i.ooc-oa 

l.OOt-TO 
AM WELD) 

PROI 

AS 

LU< AAiTIGEVSE* 
LINE (ET) 

4- RACO-CRCAVEY SEAL 

EXCESS LEAKAGE 

L.I.S.P 

1 

E/P-C-4 

(*) 

1 .001-04 

1.001-6/ 

PUSS 

11 

LOj ANTIGETSE* 
LINE (ET) 

i‘ FLEXIBLE COUPLING 
(AIGIO LINE ANO BELLOWS) 

SEIZURt (MIL ANO SOCKET) 
CAUSING 10 2 ANTIGETSEA 
LINE STRUCTURAL FAILURE 

L.I.S.P 

6 

E/P-C-U 

(•) 

I.OOE-OS 

i.oo£-oa 

POSS 

10 

LOj ANTIGCYSEA 
H»C |ET) 

TEFLON COVEREO SLIDING • 
SUPPORTS 

SEIZURE CAUSING LO; ANTl- 
GCTSCR LINE STRUCTURAL 
FAILURE 

L.I.S.P 

14 

E/P-C-1S 

(•) 

l.OOC-OS 
1 OOE-O? 
(COUPLING 

1.00C-08 
1 .001-10 
ANO WELD) 

PROI 

11 

LO^Hj, INJECT 

CHECK YALVES 

EXCESS LEAKAGE OR RUPTURE 
(EXTERNAL) 

L.I.S.P 

2 

E/P-C-4 . 
P-C-ZS 

(«) 

1.00E-07 

I.OOE-OI 

POSS 

12 

LO? H, INJECT 
SYSTEM 

harrison-k SEALS 

EXCESS LEAKAGE 

L.I.S.P 

2 

E/P-C-Zt 

(*) 

1.00E-04 

l.OOE-O? 

POSS 

M 

LHj PRESSUA1ZA- 
TlON LINE (ET) 

2" FLEXIBLE coupling 
(RIGID LINE ANO BELLOWS) 

EXCESS LEAKAGE FPON WCLO 
OR STRUCTURAL FAILURE 

m 

■ 

E/P-C-19 


I.OOE-OS 

l.OOE-O? 

(COUPLING 

1.00E-08 
1.00E-10 
ANO WELD) 

POSS 

ti 

LH? PAESSURI ZA- 
TION LINE (ET) 

mflet seals 

EXCESS LEAKAGE 


■ 

E/P-C-20 


I.OOC-04 

l.OOE-O? 

POSS 

is 

U>2 PRESSURI ZA- 
TION LINE (ET) 

PIVOTAL SUPPORTS 

SEIZURE (BALL ANO SOCKET ) 
CAUSING LHj PRISSUP1 ZAT ION 
UNI STRUCTURAL FAILURE 

d 

D 

E/P-C-l 


l.OOE-OS 

i.ooE-oa 

POSS 

H 

IMJ FUSSURUA- 
T ION LIRE (ET) 

TEFLON COVERED SLIDING 
SUPPORTS 

SEIZURE CAUSING LH, PRESS- 
URIZATION LINE STRUCTURAL 
FAILURE 

L.I.S.P 

IS 

E/P-C-IS 


I.OOE-OS 

1.001-0* 

PRO* 

11 

EH? VCNT-RUIEr 
ASSCMLT (ET) 

CAUHC V/A VALVE GASKETS 
(5) ANO SEALS (?) 

EXCESS UAKAGE 

■ 

■ 

■ 


I.00E-04 

l.OOE-O? 

POSS 


7 
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Table B-1 , Criticality 1 Component Failure Modes by Vehicle Response Mode Category (Page 6 of 6) 


CATEGORV 6: EITERNAl TAM PUNCTURED |f«IA ORBITER I HA ACT, SMAPNEL . TPS FAILURES. ETC.) 



VEHICLE AkO 

I TEN 

FAILURE K)OE 

TIHE 

NO. 1 TENS 

DOC. /PAGE 

NOTES 

FAILURE 

RATES 

MEIGhTING 


SUB S*ST|A 


PERIOO 

1 

U 

s 

FACTOR* 

98 

IHJ VENT-RELIEF 
ASSEMBLY (CT) 

PIVOTAL SUAPOUTS 

SEIEURE ((ALL ANO SOCKET) 
CAUSING V/R ASSEMBLY LINE 
STRUCTURAL FAILURE 

L.B.S.P 

A 

t/P-C-9 


i.oot-os 

! OOE-OB 

PROS 

99 

IHj TANK (ET) 

FORWARD OWE FEED THROUGH 
COVER SEALS 

ElCESS LEAKAGE RESULTING 
IN LOSS OF ULLAGE AM LM 2 
TANK failure 

l.I.S.P 

5 

E/P-C-4, 

P-C-7B 


1.00E-04 

1.00E-07 

ACT 

100 

IK; TAM (ET) 

FORUARO DOME ACCESS COVER 

haflek seal 

ElCESS LEAKAGE resulting 
IN LOSS OF ULLAGE AND LH 2 
TANK EAILURE 

L.S.S.P 

* 

E/P-C-70 


I.OOE-04 

I.00E-07 

ACT 

101 

IH 2 TANK (ET) 

AFT DONE SCREEN. ACCESS 
COVER KAFlEI SEAL 

ElCESS LEAKAGE RESULTING 
IN LH; TANK TAILURC 

L.B.S.P 

1 

E/P-C-70 


1.00E-04 

1.00E-07 

ACT 

10? 

LH 2 TANK (ET) 

AFT DONE ACCESS COVER 
NAFLEI SEAL 

ElCESS LEAKAGE RESULTING 
IN LHJ TANK FAILURE 

L.B.S.P 

1 

E/P-C-70 


1.00E-04 

I.OOE-OT 

ACT 

103 

LN ? TANK (ET) 

AFT LONGERON COVER RACO 
SEAL 

ElCESS LEAKAGE RESULTING 
IN LH 2 IANK FAILURE 

L.B.S.P 

1 

E/P-C-4 


I.OOE-04 

1.00E-08 

ACT 

104 

IH2 vent -relief 
assembly 

VENT VALVE 

inaoyertent opening 

L.B.S.P 

1 

H-B/ 1*17 


1.00E-05 

3.00E-C6 

PA08 

IOS 

EM 2 tank (ET) 

HELOS (ASSUHE 50 OEFFERENT 
ME 10 RUNS) 

MELO RUPTURE 

L.B.S.P 

1 

N-B/4-6 


G.00E-06 

6.00E-09 

ACT 

106 

HAS (ORB) 

0.63- GMj PRESSURIZATION 
LINE (TO HOOUIC) 

RUPTURE OR LEAKAGE 

1.8. S.P 

3 

a/978 


1.S0E-04 

I.S0E-07 

POSS 

10? 

HPS (OKI) 

7" Gh 2 PRESSuR 1 7AT10N l 1 HE 
A5SEH8LT . 1" SECT ION TO 
CHECK VALVE 

1UPTURE- OR lEAKAGE CAUSINC, 
LOSS OF ULLAGE PRESSURE 

L.B.S.P 

1 

P/9R0 


7.50E-04 

7.50C-07 

FOSS 

10# 

HAS (OKB/ET) 

17- 10? FEEDL INC AND NANI- 
FOLD ASSEHILY 

RUPTURE OR lEAKAGE 

L.B.S.P 

1 

B/964-9CS 

(e) 

7.00E-05 

7.00E-08 

ACT 

109 

RANGE SAFETY 
command destruct 

(ET) 

N5I DETONATOR 

INAOVERTENT DETONATION 
FROM LIGHTNING, STMT (HI 
OR RFI . ELECTROSTATIC DIS- 
CHARGE, OR autoighition 

L.B.S.P 

7 

E/A-7 


3.00E-06 

3.00E-07 

ACT 

no 

range satett 

COtlANO DESTRUCT 
ICT) 

SAf E AMD ARM ASSEMBLY 

INAOYERTENT DETONATION OF 
PC TN INSERTS OUE TO 
AUTOIGNITION 

L.B.S.P 

1 

E/A-3 


3.00E-06 

3.00E--Q7 

ACT 

111 

RANGE SAFETY 
CCiwiANO DESTRUCT 
(ET) 

COF ASSEHBLY 

INAOVtRTCNT DETONATION OF 
EIPIOSIYt INSERTS TR0H 
AUTOIGNITION 

L.B.S.P 

7 

E/A- 3 


3.00C-06 

3.00E-07 

ACT 

11? 

RANGE safety 
cowsand OESTKUCT 
(ET) 

COF HANIFOLO 

INAOYERTENT DETONATION OF 
EIPIOSIYt INSERTS FR0H 
AUTOIGNITION 

L.B.S.P 

7 

E/A-4 


3.00E-06 

3.OOE-07 

ACT 

113 

RANGE SAFETY 
COH«tNT DESTRUCT 
(ET) 

LINEAR SHAPED CHARGE 

INADVERTENT DETONATION 
CAUSED 8Y AUTOIGHITION 

L.B.S.P 

7 

E/A-4 


3.00E-06 

3.00E-07 

AC T 







APPENDIX C 

STS FAILURE MOOES 
(MECO To Centaur Deployment) 

(Contributing To Combined STS/Centaur Behavior Modes 
Nos. 6, 10, 12 and 13 As Outlined In Tables 3-1 and 3-3) 

The failure rates quoted In this Appendix are In units 
of hour, -1 unless otherwise stated 
















VEHICLE BEHAVIOR: Category (6) of Table 3-4 CRITICAL TIHE PERIOD: MECO to Utemal Tank 

Se|iaration Complete 



Weighting Factors: Hos. 8 through IS - ACT 
















































Wei9ht(n9 Factori: Nos. )6 through IS - ACT 


































VEHICLE 8CHAVI0R: Id Injury (6) of Tdtil'' 3-4 



Weighting Factors: Nos. 24 through 27 - ACT 
























































VtMiCU btliA'/IOfc; Cate gory (6) of Table 3-4 IkllRAl IIML HklOL b-n mt.H.r l« u-m.il 1, 

E«lerr>a 1 lank Punctured Vparat ion IUuu<fr (Mlf.O 



♦ 










•S^SSiSU 


•The failure rate 1 ; quoted include the possibility of propagation 
to the ME co*«/art«Mt. As noted however, the ultimate affe*t 
on the vehicle is considered to be the sa»e as Oitiiter/EI inpact 
.Beighting factors: Nos. 24 through 2 7'4 31 - POSu 

Nos. 28 through 30 - 2808 




Nos. 33 * 35 through 37 



VEHICLE BEHAVIOR: Cateqories (6) t ^ 10) of Table 3-4 CRITICAL TIMt PERIOO(S): (6) HECO TO MECO ♦ II seconds* 

(6) C* terra I Tank Punctured (10) HECO *16 seconds to Orbit 

(10) fire and Explosion in ME Compartment Insertion (end OMSl burn) 

and Crbiter Tumbles to Earth 
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LIGHTING FACTORS: Nos. 8 through 10, 13 » 15 - PROB 









VEHICLE BEHAVIOR: Categories (I?) and (13) of Table 3-4 CRITICAL TIHC PER10U: (12) MECO to Orbit Insertion 

(1?) Loss of HaneuveraOi 1 ity t Orbiter Tumbles to Earth (end OMBl burn) 

(13) Loss of Maneuverability on Orbit (13) End OMSl burn to Payload Deployaent 
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VEHICLE BEHAVIOR: Categories (12) and (13) of Table 3-4 CRITICAL TIME PERIOD: (12) HECO to Orbit Insertion 

(12) Loss of Maneuverability & Orbiter Tumbles to Earth (end 0MS1 burn) 

(13) Loss of Haneuverabi lity on Orbit (13) End 0KS1 burn to Payload Deployment 



% 



WEIGHTING FACTORS: Nos. 16. 17 & 21 through 23 - POSS 

Nos. 18 through 20. - PROB 



VEHICLE BEHAVIOR: Categories (1?) and (13) of Table 3-4 CRITICAL TINE PERIOO: (12) End External Tank Separation 



WEIGHTING FACTORS: Nos. 24 1 28 through 31 - POSS 






















